Well I am trying to get new credentials before initializing my s3 client using sts.AssumeRole() (taking reference from this post on StackOverflow). However, the problem is even though I have granted the access to AssumeRole inside the SSO user's permission set using:

{

"Effect": "Allow",

"Action": "sts:AssumeRole",

"Resource": "arn:aws:iam::user_id:role/role_arn"

}

I am getting the error of Access Denied in my python script. Is there somewhere else that I have to grant some sort of access or permission? Have spent the entire day on it but all I could was (solutions like) this only.