At present, Bamboo solely requires the AWS secret key and AWS secret access key to configure Elastic Agents as documented on this page. This configuration method utilizes long-term credentials for user authentication.

This feature request suggests Bamboo incorporates the ability to use AWS session tokens as part of the credentials for authenticating users when configuring Elastic Agents. AWS session tokens are part of the temporary credentials provided upon successful requests to assume a role. Using temporary security credentials is recommended by AWS as a more secure and efficient alternative to long-term credentials.

As an enhancement to this request, specifying the AWS session token (aws_session_token) on a Global, Plan or Project basis would allow an even better interaction as customers may specify the token when launching each agent through SSO.