Specify Tags and TransitiveTagKeys in AssumeRoleAWSCredentialsOptions

[JeffAshton]

Would like to see Tags and TransitiveTagKeys added to Amazon.Runtime.AssumeRoleAWSCredentialsOptions. Session tags allow fine grained control access to resources. It would be amazing if AssumeRoleAWSCredentials supported this.

Proposed Solution

• Add Tags and TransitiveTagKeys to Amazon.Runtime.AssumeRoleAWSCredentialsOptions

• Pass the Tags and TransitiveTagKeys to the Amazon.SecurityToken.Model.AssumeRoleRequest via Amazon.SecurityToken.AmazonSecurityTokenServiceClient.CredentialsFromAssumeRoleAuthentication method

• 👋 I may be able to implement this feature request

• ⚠️ This feature might incur a breaking change depending on what class name is used for Tag in the namespace Amazon.Runtime of AWSSDK.Core

---

This is a 🚀 Feature Request

[JeffAshton]

Just a thought, but adding an equivalent replacement for AssumeRoleAWSCredentials that lives in the Security Token assembly might be more ideal. That way it can reuse the Tag model class, and the assembly dependency is explicit instead of implicit. It's annoying when this fails at runtime because you forgot to reference the Security Token package as well.

[ashishdhingra]

ICoreAmazonSTS.CredentialsFromAssumeRoleAuthentication extension method is currently only used internally in AssumeRoleAWSCredentials.GenerateNewCredentials(). AmazonSecurityTokenServiceClient supports AssumeRoleAsync() which has support for tags (as specified by AWS Security Token Service -> AssumeRole service API. May be adding support for tags and transitive keys in the extension method could be helpful for user. Not sure if this should be added in AssumeRoleAWSCredentialsOptions as it might be a breaking change. Needs review with the team.

[ashishdhingra]

AWSSDK.SecurityToken 3.7.300.107 added support for Tags and TransitiveTagKeys in ICoreAmazonSTS.CredentialsFromAssumeRoleAuthentication() method.

[github-actions]

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.