title: Setting Google Tag Manager cookies with SameSite and Secure attributes
body: <p>Chrome is reporting the following warning:</p>
  
  <blockquote>
    <p>A cookie associated with a cross-site resource at <a href="https://www.googletagmanager.com/" rel="noreferrer">https://www.googletagmanager.com/</a> was set without the <code>SameSite</code> attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with <code>SameSite=None</code> and <code>Secure</code>. You can review cookies in developer tools under Application>Storage>Cookies and see more details at <a href="https://www.chromestatus.com/feature/5088147346030592" rel="noreferrer">https://www.chromestatus.com/feature/5088147346030592</a> and <a href="https://www.chromestatus.com/feature/5633521622188032" rel="noreferrer">https://www.chromestatus.com/feature/5633521622188032</a>.</p>
  </blockquote>
  
  <p>I have two warnings of this type. The three cookies I see are <code>gtm_auth</code>, <code>gtm_preview</code>, and <code>gtm_debug</code>. All session cookies. I see <code>gtm_auth</code> is set with <code>Secure</code> attribute (<code>SameSite</code> attribute is empty). The other two cookies do not have either attribute set.</p>
  
  <p>They are classified as analytical cookies, not marketing cookies, by the way.</p>
  
  <p>Using <code>Google Tag Manager</code>, how do I set or modify these cookies? I'm not looking to update the cookies in my code. I imagine adding cookie attributes should be doable using <code>Google Tag Manager</code>. What is Google's stance on how to address this with <code>Google Analytics</code> and <code>Google Tag Manager</code>?</p>