Hi All,

PR [3005] expanded the RegEx rule for Role ARN parameter validation.

However, I see [1] that aws-cn ARNs are blocked by an explicit code check.
This blocking appears to be present since day 1 of the Apache Polaris
codebase [2], when aws-us-gov was also blocked. The blocking of aws-us-gov
ended with [1056].

Does anyone have any rationale on why Polaris should block aws-cn ARNs?

[1]
https://github.com/apache/polaris/blob/main/polaris-core/src/main/java/org/apache/polaris/core/storage/aws/AwsStorageConfigurationInfo.java#L165

[2]
https://github.com/apache/polaris/blob/f3d9141c9708940523aa8d206a0bb32465398a7f/polaris-core/src/main/java/org/apache/polaris/core/storage/aws/AwsStorageConfigurationInfo.java#L91

[1056] https://github.com/apache/polaris/pull/1056
[3005] https://github.com/apache/polaris/pull/3005

Thanks,
Dmitri.

Reply via email to