sts:GetDelegatedAccessToken is a Write access-level action in the sts service. Returns temporary security credentials for accessing an AWS account after temporary delegation request approval. This API requires the tradeInToken provided upon request delegation approval and is intended to be used only by Amazon or AWS Partners
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows sts:GetDelegatedAccessToken. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowStsGetDelegatedAccessToken",
"Effect": "Allow",
"Action": "sts:GetDelegatedAccessToken",
"Resource": "*"
}
]
}