Add sts:TagSession permission to Stratus role (#463)

DataDog · Jan 8, 2024 · 9ca2c31 · 9ca2c31
1 parent 8c148ab
commit 9ca2c31
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/v2/internal/attacktechniques/aws/defense-evasion/organizations-leave/main.tf b/v2/internal/attacktechniques/aws/defense-evasion/organizations-leave/main.tf
@@ -29,7 +29,7 @@ resource "aws_iam_role" "role" {
  Version = "2012-10-17"
  Statement = [
  {
- Action = ["sts:AssumeRole", "sts:SetSourceIdentity"]
+ Action = ["sts:AssumeRole", "sts:SetSourceIdentity", "sts:TagSession"]
  Effect = "Allow"
  Sid = ""
  Principal = {