Amazon GameLift Streams now supports IAM role credentials for stream sessions

Amazon GameLift Streams IAM Role Support

Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling secure access to AWS resources like Amazon S3 and DynamoDB. You can pass a RoleArn parameter when starting a stream session, and your application will receive short-lived, auto-refreshing AWS credentials without any code changes.

Previously, customers had to embed long-lived access keys in application bundles or pass them as environment variables, which posed security and operational challenges. Now, Amazon GameLift Streams handles credential vending and automatic refresh using the same mechanism trusted by Amazon ECS and Amazon EKS.

IAM roles can be configured directly in the Amazon GameLift Streams console, with a pre-filled trust policy template to simplify setup. Role misconfigurations are validated at session start, providing immediate error feedback.

What to do

• Assign an IAM role to your stream session via the RoleArn parameter.
• Configure IAM roles in the Amazon GameLift Streams console.
• Validate role misconfigurations at session start.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.