cognito-identity:SetPrincipalTagAttributeMap is a Write access-level action in the cognito-identity service. Grants permission to set the principal tags for an identity pool and provider. These tags are used when making calls to GetOpenIdToken action
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows cognito-identity:SetPrincipalTagAttributeMap. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCognitoidentitySetPrincipalTagAttributeMap",
"Effect": "Allow",
"Action": "cognito-identity:SetPrincipalTagAttributeMap",
"Resource": "*"
}
]
}