feat: Add role_requires_session_name

[sebastianvoss]

Description

Enforce users to set the role-session-name to their user name when assuming a role. See https://aws.amazon.com/blogs/security/easily-control-naming-individual-iam-role-sessions/ for details.

Motivation and Context

This allows to identify user activities in AWS audit logs (e.g. EKS audit logs) based on a reliable identifier. If the user can set role-session-name to an arbitrary value this would not be possible.

Breaking Changes

Nothing.

How Has This Been Tested?

I tested this using my fork in our AWS account.

• [ ] I have updated at least one of the examples/* to demonstrate and validate my change(s)
• [ ] I have tested and validated these changes using one or more of the provided examples/* projects
• [ ] I have executed pre-commit run -a on my pull request

[github-actions[bot]]

This PR has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this PR will be closed in 10 days

[sebastianvoss]

Is there anything missing? Please just let me know.

[github-actions[bot]]

This PR has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this PR will be closed in 10 days

[sebastianvoss]

still relevant

[github-actions[bot]]

This PR has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this PR will be closed in 10 days

[github-actions[bot]]

This PR was automatically closed because of stale in 10 days