Chris LuandClaude Opus 5.5 e456d891a4 sts: drop a token-supplied aws:userid when a session has no parent user ...

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-13 03:10:09 -08:00

..

claim_based_policy_test.go

feat(iam): claim-based policy mode for AssumeRoleWithWebIdentity (Phase 3b) (#9322)

2026-05-05 12:21:55 -07:00

constants.go

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

credential_prefix_test.go

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

oidc_provider_lookup_test.go

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

parent_user_test.go

s3tables: tighten legacy OIDC subject re-anchoring (#11808)

2026-10-18 02:43:03 -07:00

provider_factory.go

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

session_claims_test.go

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

session_claims.go

s3: end a catalog-vended session with the access key it was vended for (#11945)

2026-10-23 03:58:06 -07:00

session_policy.go

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

source_access_key_test.go

s3, iceberg: record the access key a request was signed with (#11901)

2026-10-21 20:33:08 -07:00

sts_service_duration_test.go

fix(s3api/sts): respect MaxSessionLength config in DurationSeconds validation (#11267)

2026-09-10 23:03:32 -07:00

sts_service_test.go

s3: honor configured session bounds on AssumeRole and LDAP identity (#11478)

2026-09-27 07:01:51 +08:00

sts_service.go

sts: drop a token-supplied aws:userid when a session has no parent user

2026-11-13 03:10:09 -08:00

test_utils.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

token_utils.go

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00