Skip to content

Service: sts

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AWSControlTowerServiceRolePolicy AWSControlTowerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/CloudWatch-CrossAccountAccess CloudWatch-CrossAccountAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForImageBuilder AWSServiceRoleForImageBuilder
arn:aws:iam::aws:policy/aws-service-role/CloudFormationStackSetsOrgAdminServiceRolePolicy CloudFormationStackSetsOrgAdminServiceRolePolicy
arn:aws:iam::aws:policy/AWSCodeArtifactAdminAccess AWSCodeArtifactAdminAccess
arn:aws:iam::aws:policy/AWSCodeArtifactReadOnlyAccess AWSCodeArtifactReadOnlyAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/AwsGlueDataBrewFullAccessPolicy AwsGlueDataBrewFullAccessPolicy
arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicPowerUser AmazonElasticContainerRegistryPublicPowerUser
arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicFullAccess AmazonElasticContainerRegistryPublicFullAccess
arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicReadOnly AmazonElasticContainerRegistryPublicReadOnly
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV2 AWSCompromisedKeyQuarantineV2
arn:aws:iam::aws:policy/service-role/AWSElasticDisasterRecoveryRecoveryInstancePolicy AWSElasticDisasterRecoveryRecoveryInstancePolicy
arn:aws:iam::aws:policy/service-role/AWSElasticDisasterRecoveryEc2InstancePolicy AWSElasticDisasterRecoveryEc2InstancePolicy
arn:aws:iam::aws:policy/AWSApplicationDiscoveryAgentlessCollectorAccess AWSApplicationDiscoveryAgentlessCollectorAccess
arn:aws:iam::aws:policy/service-role/ROSASRESupportPolicy ROSASRESupportPolicy
arn:aws:iam::aws:policy/AmazonLaunchWizardFullAccessV2 AmazonLaunchWizardFullAccessV2
arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess AmplifyBackendDeployFullAccess
arn:aws:iam::aws:policy/AmazonQFullAccess AmazonQFullAccess
arn:aws:iam::aws:policy/AmazonQDeveloperAccess AmazonQDeveloperAccess
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV3 AWSCompromisedKeyQuarantineV3
arn:aws:iam::aws:policy/AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy
arn:aws:iam::aws:policy/AWS-SSM-DiagnosisAutomation-OperationalAccountAdministrationRolePolicy AWS-SSM-DiagnosisAutomation-OperationalAccountAdministrationRolePolicy
arn:aws:iam::aws:policy/AWS-SSM-RemediationAutomation-AdministrationRolePolicy AWS-SSM-RemediationAutomation-AdministrationRolePolicy
arn:aws:iam::aws:policy/AWS-SSM-RemediationAutomation-OperationalAccountAdministrationRolePolicy AWS-SSM-RemediationAutomation-OperationalAccountAdministrationRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectRoleMachineLearningPolicy SageMakerStudioProjectRoleMachineLearningPolicy
arn:aws:iam::aws:policy/service-role/SageMakerStudioDomainExecutionRolePolicy SageMakerStudioDomainExecutionRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePermissionsBoundary SageMakerStudioProjectUserRolePermissionsBoundary
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePolicy SageMakerStudioProjectUserRolePolicy
arn:aws:iam::aws:policy/AIOpsConsoleAdminPolicy AIOpsConsoleAdminPolicy
arn:aws:iam::aws:policy/AIOpsOperatorAccess AIOpsOperatorAccess
arn:aws:iam::aws:policy/service-role/SageMakerStudioEMRInstanceRolePolicy SageMakerStudioEMRInstanceRolePolicy

Allowed Actions

Action Service
sts:AssumeRole sts
sts:DecodeAuthorizationMessage sts
sts:GetAccessKeyInfo sts
sts:GetCallerIdentity sts
sts:GetFederationToken sts
sts:GetServiceBearerToken sts
sts:GetSessionToken sts
sts:SetContext sts
sts:SetSourceIdentity sts
sts:TagSession sts