Security Token Service
low risk
get-caller-identity shows the account/user you act as; assume-role returns temporary credentials.
aws sts get-caller-identityWho am I? · explain & risk-check →aws sts assume-role --role-arn arn --role-session-name xTemporary credentials · explain & risk-check →Reference text is hand-written and may be incomplete — check man aws for your version. Test destructive commands on a non-production system first.