{
  "context": "This evaluation assesses how well the engineer uses the @aws-sdk/client-sts package to implement temporary credential management through IAM role assumption. The criteria focus on proper usage of STS commands, client configuration, and handling of role assumption features like session naming, duration, and session tagging.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "STS Client Setup",
      "description": "Creates an STSClient instance with proper region and credentials configuration",
      "max_score": 15
    },
    {
      "name": "AssumeRoleCommand Usage",
      "description": "Uses AssumeRoleCommand with required parameters (RoleArn, RoleSessionName) and sends it via client.send()",
      "max_score": 30
    },
    {
      "name": "Duration Handling",
      "description": "Configures DurationSeconds parameter for custom session duration",
      "max_score": 10
    },
    {
      "name": "Session Tags Implementation",
      "description": "Uses the Tags parameter in AssumeRoleCommand to attach session tags with Key and Value properties",
      "max_score": 25
    },
    {
      "name": "Credentials Extraction",
      "description": "Properly extracts and transforms credentials (AccessKeyId, SecretAccessKey, SessionToken, Expiration) from AssumeRoleCommandOutput.Credentials",
      "max_score": 20
    }
  ]
}