aws iam create-role --role-name
aws iam create-role --role-name <name> --assume-role-policy-document file://<trust.json>
Risk: Safe
What it does
Makes a role from a trust policy: who may borrow it.
When to use it
When a service, a robot or a workflow needs short-lived keys. Roles are free.
Example
$ aws iam create-role --role-name kedai-web --assume-role-policy-document file://trust.jsonMake the web server's role.
$ aws iam delete-role --role-name kedai-webDelete it when done (detach its policies first).
Learn it in: Users, groups and roles · Official docs