Chris Lu 229ad84e2d s3tables: reject s3vectors resources in every ARN partition (#12215) ...

* s3tables: reject s3vectors resources in bucket policies

An arn:aws:s3vectors: Resource is as dead as an s3vectors action: the
evaluator compares against the generated s3tables ARN, so the rule the
writer believes enforced never matches.

* s3tables: reject s3vectors resources in every ARN partition

* s3tables: test wildcard-partition and mixed-list s3vectors resources

2026-10-29 13:38:53 -07:00

..

s3tablestest

vector: address remaining s3vectors review findings (#12115)

2026-10-26 20:49:44 -07:00

filer_ops_race_test.go

s3, s3tables: create buckets and namespaces exclusively (#11872)

2026-10-20 19:01:08 -07:00

filer_ops_test.go

Report a delete the filer rejected instead of answering success (#11003)

2026-08-27 22:29:48 -07:00

filer_ops.go

s3vectors: keep bucket policies in vector form and evaluate them in the gateway (#12214)

2026-10-29 13:35:34 -07:00

handler_bucket_create.go

s3vectors: accept and return encryptionConfiguration on vector buckets (#12203)

2026-10-29 11:29:00 -07:00

handler_bucket_format_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_bucket_get_list_delete.go

s3vectors: accept and return encryptionConfiguration on vector buckets (#12203)

2026-10-29 11:29:00 -07:00

handler_delete_decouple_test.go

vector: address remaining s3vectors review findings (#12115)

2026-10-26 20:49:44 -07:00

handler_existence_hiding_test.go

s3tables: judge an absent tag target by its canonical ARN (#11912)

2026-10-21 13:31:04 -07:00

handler_identity_test.go

s3tables: scope the anonymous identity's grant on the table catalogs (#12056)

2026-10-25 06:13:22 -07:00

handler_log_level_test.go

s3tables, iceberg: log client refusals at V(1), not ERROR (#11896)

2026-10-21 14:00:33 -07:00

handler_maintenance_test.go

s3tables: add the maintenance configuration APIs (#10773)

2026-08-16 10:36:59 -07:00

handler_maintenance.go

s3tables: honor resource policy Deny on remaining operations (#11825)

2026-10-19 03:59:18 -07:00

handler_name_charset_test.go

s3tables: allow hyphens in namespace and table names (#10093)

2026-06-24 16:24:45 -07:00

handler_namespace_resolution_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_namespace.go

s3tables, iceberg: log client refusals at V(1), not ERROR (#11896)

2026-10-21 14:00:33 -07:00

handler_no_trace_errorf_test.go

s3tables, iceberg: log client refusals at V(1), not ERROR (#11896)

2026-10-21 14:00:33 -07:00

handler_ownerless_test.go

s3tables: only the admin repairs a table bucket that has no owner metadata (#11873)

2026-10-20 18:58:54 -07:00

handler_policy_deny_test.go

s3tables: honor resource policy Deny on remaining operations (#11825)

2026-10-19 03:59:18 -07:00

handler_policy.go

s3vectors: put, get and delete vector bucket policies (#12201)

2026-10-29 11:15:59 -07:00

handler_principal_test.go

s3vectors: keep bucket policies in vector form and evaluate them in the gateway (#12214)

2026-10-29 13:35:34 -07:00

handler_rename_test.go

s3tables: hide inaccessible catalog resources (#11365)

2026-09-17 11:43:52 -07:00

handler_table_test.go

fix(iceberg): serve a registered table's metadata on load and commit (#12159)

2026-10-28 08:15:42 -07:00

handler_table.go

fix(iceberg): serve a registered table's metadata on load and commit (#12159)

2026-10-28 08:15:42 -07:00

handler_update_cas_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view_rename_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view_test.go

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

handler_view.go

vector: address remaining s3vectors review findings (#12115)

2026-10-26 20:49:44 -07:00

handler.go

s3vectors: keep bucket policies in vector form and evaluate them in the gateway (#12214)

2026-10-29 13:35:34 -07:00

iam.go

s3tables: scope the anonymous identity's grant on the table catalogs (#12056)

2026-10-25 06:13:22 -07:00

iceberg_layout_test.go

s3tables: accept Puffin statistics files in a table's metadata/ (#11892)

2026-10-21 12:19:53 -07:00

iceberg_layout.go

s3tables: accept Puffin statistics files in a table's metadata/ (#11892)

2026-10-21 12:19:53 -07:00

iceberg_manifest_list_test.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

iceberg_manifest_list.go

iceberg: read manifest lists that omit the Avro format version (#10475)

2026-07-28 16:42:17 -07:00

iceberg_manifest_test.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

iceberg_manifest.go

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

manager_test.go

s3vectors: accept and return encryptionConfiguration on vector buckets (#12203)

2026-10-29 11:29:00 -07:00

manager.go

s3vectors: keep bucket policies in vector form and evaluate them in the gateway (#12214)

2026-10-29 13:35:34 -07:00

permissions_test.go

s3tables: reject s3vectors resources in every ARN partition (#12215)

2026-10-29 13:38:53 -07:00

permissions.go

s3tables: reject s3vectors resources in every ARN partition (#12215)

2026-10-29 13:38:53 -07:00

table_data_dir_test.go

iceberg: make a table commit a compare-and-swap (#10775)

2026-08-16 12:55:42 -07:00

types.go

s3vectors: accept and return encryptionConfiguration on vector buckets (#12203)

2026-10-29 11:29:00 -07:00

utils_location_test.go

s3tables: confine caller-supplied metadataLocation to the table's namespace

2026-10-12 02:41:28 -07:00

utils_namespace_test.go

iceberg: persist namespace properties for create/get (#8276)

2026-02-09 22:20:45 -08:00

utils.go

s3vectors: accept and return encryptionConfiguration on vector buckets (#12203)

2026-10-29 11:29:00 -07:00