...
Click "+Add Access Policy"
Click the down-down arrow on the right of Key Secret permissions, and then select "Get" and "List"
Click "None selected" under "Select principal"
...
Click the "Select" button
Click "None selected" under "Authorized application"
In the search box, enter the name of the application that you have previously created for STS, and then select it
Click the "Select" button
Now, click the "Add" button to add this new access policy
...