Anis Eleuch 7aa00bff89
sts: Add support of AssumeRoleWithWebIdentity and DurationSeconds (#18835)
To force limit the duration of STS accounts, the user can create a new
policy, like the following:

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": ["sts:AssumeRoleWithWebIdentity"],
    "Condition": {"NumericLessThanEquals": {"sts:DurationSeconds": "300"}}
  }]
}

And force binding the policy to all OpenID users, whether using a claim name or role
ARN.
2024-02-05 11:44:23 -08:00
..
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2023-09-14 14:50:16 -07:00
2024-01-17 23:03:17 -08:00
2023-09-04 12:57:37 -07:00
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2023-09-04 12:57:37 -07:00
2024-01-17 23:03:17 -08:00
2023-12-20 20:13:40 -08:00
2024-01-17 23:03:17 -08:00
2024-01-17 23:03:17 -08:00
2024-02-05 01:04:26 -08:00