SessionCredentials - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


The established temporary security credentials of the session.


Directory buckets - These session credentials are only supported for the authentication and authorization of Zonal endpoint APIs on directory buckets.



A unique identifier that's associated with a secret access key. The access key ID and the secret access key are used together to sign programmatic Amazon requests cryptographically.

Type: String

Required: Yes


Temporary security credentials expire after a specified interval. After temporary credentials expire, any calls that you make with those credentials will fail. So you must generate a new set of temporary credentials. Temporary credentials cannot be extended or refreshed beyond the original specified interval.

Type: Timestamp

Required: Yes


A key that's used with the access key ID to cryptographically sign programmatic Amazon requests. Signing a request identifies the sender and prevents the request from being altered.

Type: String

Required: Yes


A part of the temporary security credentials. The session token is used to validate the temporary security credentials.

Type: String

Required: Yes

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: