AWS Security Token Service (sts)

Additions

Actions

• AssumeRoot
  
  • Description:  Grants permission to obtain a set of temporary security credentials that you can use to perform privileged tasks in member accounts in your organization
  • Access:  Write
  • Resources: 

    Name: root-user

    Required: Yes

  • Conditions: 

    sts:TaskPolicyArn

Resources

• root-user
  
  • Arn:  arn:${Partition}:iam::${Account}:root

Conditions

• sts:TaskPolicyArn
  
  • Description:  Filters access by TaskPolicyARN
  • Type:  String