使用AWS Security Token Service (STS)来动态生成临时的AWS凭证。

示例代码：

import boto3

创建STS客户端

sts_client = boto3.client('sts')

获取AWS账号ID

aws_account_id = sts_client.get_caller_identity().get('Account')

定义角色ARN

role_arn = 'arn:aws:iam::{}:role/{}'.format(aws_account_id, 'MyCustomRole')

生成临时凭证

response = sts_client.assume_role( RoleArn=role_arn, RoleSessionName='MySession' )

访问S3临时凭证示例

s3_client = boto3.client( 's3', aws_access_key_id=response['Credentials']['AccessKeyId'], aws_secret_access_key=response['Credentials']['SecretAccessKey'], aws_session_token=response['Credentials']['SessionToken'] )

使用临时凭证执行S3操作

response = s3_client.list_buckets()

print(response)