sts:TagSession is a Tagging access-level action in the sts service. Grants permission to add tags to a STS session
ARNs that sts:TagSession can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants sts:TagSession.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the endpoint URL to which SAML assertions are presented
Filters access by the transitive tag keys that are passed in the request
Filters access by the tags associated with the resource
Filters access by the tags that are attached to the role that is being assumed
A minimal policy that allows sts:TagSession. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowStsTagSession",
"Effect": "Allow",
"Action": "sts:TagSession",
"Resource": "*"
}
]
}