Hi,
I'm working with AWS SSO based on Jumpcloud external Idp.
I'd like to find a way to put the tag SSMSessionRunAs tag to the AWSReservedSSO role created by SSO into AWS accounts.
If I try to put the tag directly I receive:
"Cannot perform the operation on the protected role 'AWSReservedSSO_xxxxx' - this role is only modifiable by AWS"
Someone know a way to do that ? Or maybe a "plan B" or a way to add the tag SSMSessionRunAs ?
Thanks a lot
Dario