IAM - Add all valid TrustPolicy actions (#5751)

2022-12-10 19:23:34 -01:00 · 2022-12-10 19:23:34 -01:00 · dc812d9990
commit dc812d9990
parent b2300f1eae
1 changed files with 8 additions and 0 deletions
--- a/moto/iam/policy_validation.py
+++ b/moto/iam/policy_validation.py
@ -557,9 +557,17 @@ class IAMTrustPolicyDocumentValidator(BaseIAMPolicyValidator):

    @staticmethod
    def _validate_trust_policy_action(action):
+        # https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecuritytokenservice.html
        assert action in (
            "sts:AssumeRole",
            "sts:AssumeRoleWithSAML",
            "sts:AssumeRoleWithWebIdentity",
+            "sts:DecodeAuthorizationMessage",
+            "sts:GetAccessKeyInfo",
+            "sts:GetCallerIdentity",
+            "sts:GetFederationToken",
+            "sts:GetServiceBearerToken",
+            "sts:GetSessionToken",
+            "sts:SetSourceIdentity",
            "sts:TagSession",
        )