Chris Lu 0a96972a99 s3: verify X-Forwarded-Prefix only from trusted proxies (#11843) ...

* s3api: check the direct peer against the trusted-proxy allowlist

* s3: verify X-Forwarded-Prefix only from trusted proxies

* s3: note that trusted proxies must sanitize forwarded headers

2026-10-19 15:55:18 -07:00

..

bucket_policy_test.go

Fixes from the review of the admin bucket policy UI (#10907)

2026-08-24 00:52:01 -07:00

bucket_policy.go

s3: fail closed on unsupported bucket-policy condition operators (#11283)

2026-09-11 22:17:11 -07:00

conditions_failclosed_test.go

s3: fail closed on unsupported bucket-policy condition operators (#11283)

2026-09-11 22:17:11 -07:00

conditions_ignorecase_test.go

s3: fail closed on unsupported bucket-policy condition operators (#11283)

2026-09-11 22:17:11 -07:00

conditions_validation_test.go

s3: fail closed on unsupported bucket-policy condition operators (#11283)

2026-09-11 22:17:11 -07:00

conditions.go

s3api: persist ACLs on PutObject uploads (#11592)

2026-10-05 09:13:19 +08:00

engine_buckets_for_action_test.go

s3: list the buckets an attached IAM policy grants (#10458)

2026-07-27 16:42:01 -07:00

engine_enhanced_test.go

feat(s3api): Implement S3 Policy Variables (#8039)

2026-01-16 11:12:28 -08:00

engine_isolation_test.go

feat(s3api): Implement S3 Policy Variables (#8039)

2026-01-16 11:12:28 -08:00

engine_notresource_test.go

feat(s3api): Implement S3 Policy Variables (#8039)

2026-01-16 11:12:28 -08:00

engine_paths_test.go

feat(s3api): Implement S3 Policy Variables (#8039)

2026-01-16 11:12:28 -08:00

engine_test.go

s3api: configurable trusted-proxy allowlist for aws:SourceIp (#11302) (#11315)

2026-09-14 13:54:26 -07:00

engine_variables_test.go

feat(s3api): Implement S3 Policy Variables (#8039)

2026-01-16 11:12:28 -08:00

engine.go

s3api: persist ACLs on PutObject uploads (#11592)

2026-10-05 09:13:19 +08:00

examples.go

go fix

2026-02-20 18:42:00 -08:00

GOVERNANCE_PERMISSIONS.md

Add policy engine (#6970)

2025-07-13 16:21:36 -07:00

INTEGRATION_EXAMPLE.md

Add policy engine (#6970)

2025-07-13 16:21:36 -07:00

POLICY_EXAMPLES.md

Add policy engine (#6970)

2025-07-13 16:21:36 -07:00

principal_test.go

s3: support AWS object form for bucket policy Principal, add NotPrincipal (#10125)

2026-06-27 22:36:26 -07:00

README_POLICY_ENGINE.md

s3api: evaluate object-tag policy conditions on delete, ACL and lock operations (#11807)

2026-10-17 22:30:32 -07:00

request_grant_conditions_test.go

s3api: persist ACLs on PutObject uploads (#11592)

2026-10-05 09:13:19 +08:00

request_grant_conditions.go

s3api: persist ACLs on PutObject uploads (#11592)

2026-10-05 09:13:19 +08:00

sse_condition_test.go

s3: support s3:x-amz-server-side-encryption policy condition (#8806)

2026-03-27 23:15:01 -07:00

trusted_proxies_test.go

s3: verify X-Forwarded-Prefix only from trusted proxies (#11843)

2026-10-19 15:55:18 -07:00

trusted_proxies.go

s3: verify X-Forwarded-Prefix only from trusted proxies (#11843)

2026-10-19 15:55:18 -07:00

types_test.go

s3api: preserve lifecycle config responses for Terraform (#8805)

2026-03-27 22:50:02 -07:00

types.go

s3api: persist ACLs on PutObject uploads (#11592)

2026-10-05 09:13:19 +08:00