Invalid ARN Resource when creating the policy,

[trufa]

When creating the policy I'm copying exactly as shown in the docs

With my id replaced.

I am getting the error:

Invalid ARN Resource Resource ARN does not match the expected ARN format. Update the resource portion of the ARN.

arn:aws:sts::MY_ID:federated-user/S3UploadWebToken

I noticed that if I change sts for iam it accepts the policy.

arn:aws:aim::MY_ID:federated-user/S3UploadWebToken

For now I changed the resource for "*" and it uploads but I am not sure of the security implications of this.

Any more info on why this might be happening?

[rgoggins]

If you switch to arn:aws:iam, you get the issue:

AccessDenied: User: arn:aws:iam::<MY_ID>:user/<USER> is not authorized to perform: sts:GetFederationToken on resource: arn:aws:sts::<MY_ID>:federated-user/S3UploadWebToken

[danielivanovz]

if you create the policy, it will still work, tho would be nice to find out why is triggering an Error