Timebound IAM

概要

Timebound IAM operates as an MCP Server, strategically placed between your AI agent and AWS STS. Its core function is to issue short-lived, finely-scoped AWS credentials, allowing AI coding agents like Claude Code to interact with AWS resources without relying on risky long-lived keys. This tool significantly boosts security by ensuring that credentials are time-bounded (ranging from 15 minutes to 12 hours), precisely scoped to specific AWS services, and offer predefined access levels (read-only or full access). All issued credentials are automatically cleaned up upon expiry, minimizing potential vulnerabilities and adhering to the principle of least privilege.

主な機能

• Issues short-lived, service-scoped AWS credentials via STS AssumeRole
• Credentials are time-bounded (15 minutes to 12 hours)
• Supports specific access levels (read-only or full)
• Automated cleanup of expired credentials
• Setup wizard for AWS IAM trust and inline policy generation
• 1 GitHub stars

ユースケース

• Securely granting AI agents temporary access to AWS resources
• Limiting the blast radius of operations performed by AI coding assistants on AWS
• Integrating AI agents like Claude Code with AWS services using principle of least privilege