iam.assumeModule 31Give an agent a short-lived cloud credential only while it holds a live lease on the role, and let the credential die with the lease.
iam.assume brokers AWS credentials through STS AssumeRoleWithWebIdentity. No lease on the role ARN, no credential, and the credential's lifetime never outlives what is left of the lease. The ledger records an issue, never the keys. A warehouse route does the same for Snowflake and BigQuery.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
roleArnarn:aws:iam::. The lease must be on this exact string.actorDidsessionName is never used to identify the holder.webIdentityToken/docs/iam-assumeAPI referenceRoutes, bodies and status codes./docs/iam-assumeOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/opsStart freeCreate a workspace and admit your first intent./auth/signup
sessionNameacp and is only a label.regionus-east-1.ttlMsleaseIdleaseScoped is true.expirationMsassume takes a roleArn, an actorDid and a webIdentityToken, and returns STS credentials for that role. The lease it needs is held on the role ARN itself.
warehouse takes a resource URN of the form imd://warehouse/<snowflake|bigquery>/<account>/<path>, an actorDid and optionally a subjectToken, and mints a key-pair JWT or a federated access token.
The agent acquires a lease on the role ARN through coordination.lease. The lease is what justifies the credential; nothing else does.
assume takes roleArn, actorDid, sessionName, webIdentityToken and optionally region and ttlMs. The token must be one AWS trusts for the role.
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace. iam.assume docs
This module's calls change real state or reach outside services, so the shared demo does not run them. Sign in to run it in your own workspace.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/iam/assume Authorization: Bearer av_workspace_•••• Content-Type: application/json { "roleArn": "arn:aws:iam::123456789012:role/deploy", "actorDid": "did:web:acme.example:agent:release", "sessionName": "release-agent", "webIdentityToken": "eyJ…" } → 200 { assumed, leaseId, expirationMs, accessKeyId, secretAccessKey, sessionToken }
{
"assumed": true,
"roleArn": "arn:aws:iam::123456789012:role/deploy",
"sessionName": "release-agent",
"leaseId": "lease_4b7e",
"leaseScoped": true,
"expirationMs": 1793523600000,
"accessKeyId": "ASIAEXAMPLEKEYID",
"secretAccessKey": "example-secret-access-key",
"sessionToken": "example-session-token"
}An agent that deploys holds a lease on the deploy role and nothing else. Without it, the role has no credential to hand over.
A lease with twenty minutes left cannot yield an hour-long credential; the lifetime is the smaller of the lease's remainder, ttlMs and 3,600,000 ms.
Each issue appends an iam.assume event naming the actor, the role and the expiry. watchdog.check reads those events for rate anomalies.
A role whose name matches a protected class such as billing or kms is refused with 403, even for a lease holder.
coordination.lease; the broker only reads leases.watchdog.check, which reads what this module records.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
ttlMs and 3,600,000 ms.iam.assume records the actor, the role and the expiry, and never the access key, secret or session token.expirationMs; the lease only stops the next one.AWS STS refuses sessions under 900 seconds, so a lease with less than that left cannot be turned into a credential.
The role name, the part after the last /, is checked against the snapshot's protected classes. A match is refused before any lease is read.
The lease holder is compared with actorDid, which an authenticated agent can only set to its own DID.
The Snowflake and BigQuery paths need their own secrets bound. An unconfigured warehouse answers 501, and a Snowflake resource with no mapped role is 403.
roleArn must start with arn:aws:iam::, webIdentityToken and actorDid are required, and a missing one returns 400.ttlMs says.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/iam/assumeMint AWS temporary credentials for a leased role./api/v1/acp/iam/warehouseMint a Snowflake or BigQuery credential for a leased resource.coordination.iam.assumeRequest AWS credentials from an agent.coordination.lease02Resource leases and queuesHold a resource for one agent at a time, with a lease that lapses on its own and a queue for the agents that have to wait.watchdog.check36Issuance watchdogCatch a plane that is issuing leases or credentials too fast, or has gone quiet, by reading the ledger instead of asking the plane.coordination.admit01Intralock admissionDecide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.mcp.enforce04MCP gateway enforcementPut a front on an MCP server so each tool call is admitted like any other intent, and a refused call never reaches the server.github.enforce29GitHub write gateMake a commit's check go red unless the agent behind it holds the grant and, for a write, a human has confirmed.saas.admit30SaaS connector admissionAsk whether an agent may touch a SaaS source, and let it write through one only after the same check that gates everything else.It refuses a protected-class role name with 403, then a missing, expired, foreign or nearly spent lease with 409, then calls STS.
The response carries the access key, secret and session token with expirationMs. Releasing the lease ends the broker's willingness to mint, not credentials already issued.
coordination.halt06