Add sts:TagSession permission to Stratus role (#463)

DataDog · Jan 8, 2024 · 9ca2c31 · 9ca2c31
1 parent 8c148ab
commit 9ca2c31
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/v2/internal/attacktechniques/aws/defense-evasion/organizations-leave/main.tf b/v2/internal/attacktechniques/aws/defense-evasion/organizations-leave/main.tf
@@ -29,7 +29,7 @@ resource "aws_iam_role" "role" {
     Version = "2012-10-17"
     Statement = [
       {
-        Action = ["sts:AssumeRole", "sts:SetSourceIdentity"]
+        Action = ["sts:AssumeRole", "sts:SetSourceIdentity", "sts:TagSession"]
         Effect = "Allow"
         Sid    = ""
         Principal = {