Fabian Morgan created HDDS-16274:
------------------------------------
Summary: [STS] Tighten session policy validation
Key: HDDS-16274
URL: https://issues.apache.org/jira/browse/HDDS-16274
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Fabian Morgan
Assignee: Fabian Morgan
There are edge cases in the IAM session policy validation that need to be
addressed, including but not limited to the following:
1) Duplicate fields in one statement, such as Effect, Action, or Resource must
not be allowed
2) Incorrect shape/values must be disallowed. For example, null for Effect, []
for Statement, [] for Resource, duplicate s3:prefix, non-homogeneous array
value of s3:prefix, etc.
3) Unsupported fields in a statement must be disallowed, such as NotAction.
4) Missing required fields in Statement, such as missing Action, or Resource,
etc must be disallowed.
This ticket tightens the validation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
