authenticate websocket apis using sts

[cesnietor]

This can be tested for Trace and Console by just creating a policy for each respectively and assign it to a user:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "admin:ConsoleLog"
      ],
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "admin:ServerTrace"
      ],
      "Effect": "Allow",
      "Sid": ""
    }
  ]
}

[bexsoft]

Reviewing...

[bexsoft]

LGTM