diff --git a/.autover/changes/9911ed8d-0530-46a8-bb79-c83f3bb05920.json b/.autover/changes/9911ed8d-0530-46a8-bb79-c83f3bb05920.json
new file mode 100644
index 00000000..6f0fd27c
--- /dev/null
+++ b/.autover/changes/9911ed8d-0530-46a8-bb79-c83f3bb05920.json
@@ -0,0 +1,11 @@
+{
+  "Projects": [
+    {
+      "Name": "AWS.Deploy.CLI",
+      "Type": "Patch",
+      "ChangelogMessages": [
+        "Update the CDK Bootstrap template to the latest version"
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/src/AWS.Deploy.Orchestration/CDK/CDKBootstrapTemplate.yaml b/src/AWS.Deploy.Orchestration/CDK/CDKBootstrapTemplate.yaml
index 2ba952fc..46e47339 100644
--- a/src/AWS.Deploy.Orchestration/CDK/CDKBootstrapTemplate.yaml
+++ b/src/AWS.Deploy.Orchestration/CDK/CDKBootstrapTemplate.yaml
@@ -270,6 +270,11 @@ Resources:
     Properties:
       AssumeRolePolicyDocument:
         Statement:
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
           - Action: sts:AssumeRole
             Effect: Allow
             Principal:
@@ -293,6 +298,11 @@ Resources:
     Properties:
       AssumeRolePolicyDocument:
         Statement:
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
           - Action: sts:AssumeRole
             Effect: Allow
             Principal:
@@ -316,6 +326,11 @@ Resources:
     Properties:
       AssumeRolePolicyDocument:
         Statement:
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
           - Action: sts:AssumeRole
             Effect: Allow
             Principal:
@@ -424,6 +439,11 @@ Resources:
     Properties:
       AssumeRolePolicyDocument:
         Statement:
+          - Action: sts:TagSession
+            Effect: Allow
+            Principal:
+              AWS:
+                Ref: AWS::AccountId
           - Action: sts:AssumeRole
             Effect: Allow
             Principal:
@@ -589,7 +609,7 @@ Resources:
       Type: String
       Name:
         Fn::Sub: /cdk-bootstrap/${Qualifier}/version
-      Value: "21"
+      Value: "22"
 Outputs:
   BucketName:
     Description: The name of the S3 bucket owned by the CDK toolkit stack