4 Commits

Author	SHA1	Message	Date
Harshavardhana	99bf4d0c42	[sec] Match ${aws:username} exactly instead of prefix match (#7791) ... This PR fixes a security issue where an IAM user based on his policy is granted more privileges than restricted by the users IAM policy. This is due to an issue of prefix based Matcher() function which was incorrectly matching prefix based on resource prefixes instead of exact match.	2019-06-15 11:27:17 -07:00
kannappanr	5ecac91a55	Replace Minio refs in docs with MinIO and links (#7494)	2019-04-09 11:39:42 -07:00
Harshavardhana	5353edcc38	Support policy variable replacement (#7085) ... This PR supports iam and bucket policies to have policy variable replacements in resource and condition key values. For example - ${aws:username} - ${aws:userid}	2019-01-21 10:27:14 +05:30
Harshavardhana	54ae364def	Introduce STS client grants API and OPA policy integration (#6168) ... This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks	2018-10-09 14:00:01 -07:00