Added tests for IAM policies for bucket operations (#19734)

* Added tests for bucket access policies Signed-off-by: Shubhendu Ram Tripathi <shubhendu@minio.io> * move to correct category of tests Signed-off-by: Shubhendu Ram Tripathi <shubhendu@minio.io> --------- Signed-off-by: Shubhendu Ram Tripathi <shubhendu@minio.io>
2025-12-04 23:02:31 -05:00 · 2024-05-14 21:13:07 +05:30
parent 534e7161df
commit de4d3dac00
5 changed files with 131 additions and 0 deletions
--- a/docs/iam/policies/deny-objects-with-invalid-sse-kms-key-id.json
+++ b/docs/iam/policies/deny-objects-with-invalid-sse-kms-key-id.json
@@ -0,0 +1,17 @@
+{
+   "Version":"2012-10-17",
+   "Id":"PutObjectPolicy1",
+   "Statement":[{
+         "Sid":"DenyObjectsWithInvalidSSEKMS",
+         "Effect":"Deny",
+         "Principal":"*",
+         "Action":"s3:PutObject",
+         "Resource":"arn:aws:s3:::multi-key-poc/*",
+         "Condition":{
+            "StringNotEquals":{
+               "s3:x-amz-server-side-encryption-aws-kms-key-id":"minio-default-key"
+            }
+         }
+      }
+   ]
+}