Aditya Manthramurthy c1a49490c7 fix: check sub-policy properly when present (#21642) ...

This fixes a security issue where sub-policy attached to a service
account or STS account is not properly validated under certain "own"
account operations (like creating new service accounts). This allowed a
service account to create new service accounts for the same user
bypassing the inline policy restriction.

2025-10-15 10:00:45 -07:00

103 KiB

Raw Blame History

View Raw