[NRL-793] Add sts:TagSession perm to default infra trust policy

mattdean3-nhs · mattdean3-nhs · commit a6d0e39dedd7 · 2024-09-26T09:29:37.000+01:00
diff --git a/terraform/bootstrap/non-mgmt/terraform-trust-policy.json b/terraform/bootstrap/non-mgmt/terraform-trust-policy.json
@@ -6,7 +6,7 @@
       "Principal": {
         "AWS": "arn:aws:iam::REPLACEME:root"
       },
-      "Action": "sts:AssumeRole",
+      "Action": ["sts:AssumeRole", "sts:TagSession"],
       "Condition": {}
     }
   ]

Original file line number	Diff line number	Diff line change
`@@ -6,7 +6,7 @@`
`6`	`6`	`"Principal": {`
`7`	`7`	`"AWS": "arn:aws:iam::REPLACEME:root"`
`8`	`8`	`},`
`9`		`- "Action": "sts:AssumeRole",`
	`9`	`+ "Action": ["sts:AssumeRole", "sts:TagSession"],`
`10`	`10`	`"Condition": {}`
`11`	`11`	`}`
`12`	`12`	`]`