Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-143010081.8 KB

Creates a profile, a list of the roles that Roles Anywhere service is trusted to assume. You use profiles to intersect permissions with IAM managed policies.

Required permissions: rolesanywhere:CreateProfile.

post/profiles

Request body

namestring required

The name of the profile.

requireInstancePropertiesboolean

Unused, saved for future use. Will likely specify whether instance properties are required in temporary credential requests with this profile.

sessionPolicystring

A session policy that applies to the trust boundary of the vended session credentials.

roleArnsRoleArn[] required

A list of IAM roles that this profile can assume in a temporary credential request.

managedPolicyArnsManagedPolicyListMemberString[]

A list of managed policy ARNs that apply to the vended session credentials.

durationSecondsinteger

Used to determine how long sessions vended using this profile are valid for. See the <code>Expiration</code> section of the <a href="https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object">CreateSession API documentation</a> page for more details. In requests, if this value is not provided, the default value will be 3600.

enabledboolean

Specifies whether the profile is enabled.

acceptRoleSessionNameboolean

Used to determine if a custom role session name will be accepted in a temporary credential request.

Response

Success