.NET AWS STS GetSessionToken 错误“此身份池不支持未经身份验证的访问”

如何解决.NET AWS STS GetSessionToken 错误“此身份池不支持未经身份验证的访问”

我正在使用 OKTA 对用户进行身份验证，然后尝试将我从 OKTA 获得的“access_token”交换为使用 STS 的 AWS 凭证。

我的代码如下：

String authenticatedRoleARN = "arn:aws:iam::11111111:role/myapp-dev-ssm-lifecyclehook";
String awsAccountNumber = "22222222";
CognitoAWSCredentials cognitoCredentials 
    = new CognitoAWSCredentials(awsAccountNumber,"us-east-1:aaa55555-7aaa-4333-9222-4f45555c31b",null,authenticatedRoleARN,RegionEndpoint.USEast1);

Amazon.SecurityToken.AmazonSecurityTokenServiceClient securityTokenServiceClient
    = new Amazon.SecurityToken.AmazonSecurityTokenServiceClient(cognitoCredentials);
etSessionTokenRequest sessionTokenRequest = new GetSessionTokenRequest();
sessionTokenRequest.TokenCode = accesstoken;    //this is the access_token received from OKTA when user is authenticated
sessionTokenRequest.DurationSeconds = 600;

GetSessionTokenResponse sessionTokenResponse = securityTokenServiceClient.GetSessionToken(sessionTokenRequest);

对 GetSessionToken 的调用失败，出现错误“此身份池不支持未经身份验证的访问”。

任何想法可能导致这种情况和/或我可能做错了什么？

谢谢！！