sts = boto3.client('sts') assumed = sts.assume_role( RoleArn='arn:aws:iam::123456789012:role/CrossAccountRole', RoleSessionName='MySession' ) # 使用临时凭证访问目标账号资源