Chris Lu
49a64f50f1
Add session policy support to IAM (#8338)
* Add session policy support to IAM
- Implement policy evaluation for session tokens in policy_engine.go
- Add session_policy field to session claims for tracking applied policies
- Update STS service to include session policies in token generation
- Add IAM integration tests for session policy validation
- Update IAM manager to support policy attachment to sessions
- Extend S3 API STS endpoint to handle session policy restrictions
* fix: optimize session policy evaluation and add documentation
* sts: add NormalizeSessionPolicy helper for inline session policies
* sts: support inline session policies for AssumeRoleWithWebIdentity and credential-based flows
* s3api: parse and normalize Policy parameter for STS HTTP handlers
* tests: add session policy unit tests and integration tests for inline policy downscoping
* tests: add s3tables STS inline policy integration
* iam: handle user principals and validate tokens
* sts: enforce inline session policy size limit
* tests: harden s3tables STS integration config
* iam: clarify principal policy resolution errors
* tests: improve STS integration endpoint selection
2026-02-13 13:58:22 -08:00
..
2021-06-28 15:48:07 -07:00
2026-01-20 15:07:43 -08:00
2025-12-15 13:03:34 -08:00
2026-01-20 15:07:43 -08:00
2025-12-15 15:46:06 -08:00
2026-01-07 13:06:08 -08:00
2025-12-08 23:21:02 -08:00
2025-12-19 15:33:16 -08:00
2025-12-08 23:21:02 -08:00
2025-12-06 21:54:12 -08:00
2023-11-13 08:23:53 -08:00
2026-02-12 14:47:20 -08:00
2026-02-13 13:58:22 -08:00
2026-01-07 13:06:08 -08:00
2025-12-14 21:56:07 -08:00
2026-02-13 00:40:56 -08:00