AWS IAM Role Chained

Role chaining means assuming an IAM role using the credentials of another identity, possibly in a different AWS account. An IAM role has no long-term credentials of its own: assuming it returns temporary credentials for that role.

In Freeleapp, a chained session points to an assumer session. When you start it, Freeleapp uses the assumer’s credentials to call sts:AssumeRole for you.

AWS guide: Delegate access across AWS accounts using IAM roles.

Create the session

1. Click + in the top bar.
2. Select Amazon AWS as the cloud provider.
3. Select AWS IAM Role Chained as the access method.
4. Fill in the fields below and click Create Session.

Field	Description
Session alias	A name for the session in Freeleapp.
Named Profile	The profile name in ~/.aws/credentials. Use it from the AWS CLI with --profile.
Region	The default region for this session.
Role ARN	The ARN of the role to assume.
Role session name	The name recorded for this session in AWS CloudTrail, useful to audit what the identity did.
Assumer session	The session whose credentials are used to assume the role.

Tip

You can also right-click an AWS session and choose Create Chained Session to prefill the assumer.