Accessing IAM Roles with Contract Tests

Hi, my current resource AWS::DataSync::LocationS3 requires a property 'BucketAccessRoleArn', which is an IAM role for an S3 bucket. I believe this forces the DataSync API to use IAM API's in order to access the role, which gives an "Error occurred while getting IAM Role" for contract tests.

I believe the tests currently get temporary credentials in the same way as invoking "aws sts get-session-token". But these temporary credentials do not allow calls for IAM API operations as stated here in the 'Permissions' section: https://docs.aws.amazon.com/cli/latest/reference/sts/get-session-token.html

I am able to get SAM testing to work by using MFA authentication in the request: "aws sts get-session-token --serial number --token-code ", but I am unable to do something similar for contract tests.

No se nombran archivos de implementación. Empieza reproduciendo el flujo de credenciales de contract-test y compáralo con SAM testing y el comportamiento de AWS STS get-session-token descrito en el issue. Se considera completado cuando los contract tests pueden acceder al IAM role referenciado por BucketAccessRoleArn sin el error de IAM role, incluido el escenario de MFA requerido.

Escrito por el modelo de indexación a partir del texto del issue.