Chris LuandClaude Opus 5.5 e456d891a4 sts: drop a token-supplied aws:userid when a session has no parent user ...

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-13 03:10:09 -08:00

..

integration

s3: resolve a role session's aws:username from its user, not its session name (#12572)

2026-11-11 15:32:13 -08:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

oidc

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

policy

iam: scope CreateServiceAccount's ParentUser by policy resource (#11736)

2026-10-18 11:48:01 -07:00

providers

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

sts

sts: drop a token-supplied aws:userid when a session has no parent user

2026-11-13 03:10:09 -08:00

util

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

utils

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

constants.go

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

helpers.go

s3: require their own actions to change a bucket's CORS or versioning (#12433)

2026-11-06 09:12:00 -08:00

redact_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

redact.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

responses_test.go

s3/iam: reuse one request id per request (#8538)

2026-03-06 15:22:39 -08:00

responses.go

s3/iam: manage roles through the IAM API, with an opt-in persistent role store (#11522)

2026-09-30 20:45:47 +08:00

validation_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

validation.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00