Chris Lu
c1636ac41c
s3: give STS sessions a distinct owner account instead of admin ( #9963 )
...
* s3: give STS sessions a distinct owner account, not admin
STS sessions were built with Account: &AccountAdmin, so every assumed-role
session shared the admin account for ownership and ACL checks. Use the
assumed-role user as the account id instead, matching the JWT auth path.
Session permissions are unchanged: they come from the session policies,
and admin is granted only through Actions.
* s3: resolve STS session identity to the OIDC subject
Use sessionInfo.Subject (falling back to the assumed-role user when
absent) for the session identity name and account id, so the SigV4 and
JWT auth paths resolve the same session to the same identity instead of
diverging on AssumedRoleUser vs Subject.
* s3: trim verbose comments
2026-06-14 13:55:11 -07:00
..
2026-01-28 14:34:07 -08:00
2026-06-11 21:56:16 -07:00
2026-05-07 18:54:06 -07:00
2026-04-20 12:04:41 -07:00
2026-04-07 11:13:29 -07:00
2026-06-11 21:56:16 -07:00
2026-03-07 09:19:40 -08:00
2026-05-31 11:15:05 -07:00
2026-05-30 21:09:53 -07:00
2026-05-29 20:54:54 -07:00
2026-05-27 13:05:41 -07:00
2024-07-04 11:00:41 -07:00
2026-06-14 13:54:49 -07:00
2026-05-18 21:35:53 -07:00
2026-05-21 00:39:42 -07:00
2026-06-03 23:28:25 -07:00
2026-02-20 18:40:47 -08:00
2026-05-08 21:35:27 -07:00
2026-01-12 10:45:24 -08:00
2026-06-14 13:54:49 -07:00
2026-05-28 18:10:24 -07:00
2026-02-26 16:36:24 -08:00
2026-05-28 17:00:41 -07:00
2026-06-07 11:52:09 -07:00
2026-06-07 11:52:09 -07:00
2026-06-14 13:55:11 -07:00
2026-06-10 11:00:35 -07:00
2026-04-17 12:20:28 -07:00
2026-06-14 13:55:11 -07:00
2026-02-16 13:59:13 -08:00
2026-04-17 12:23:21 -07:00
2026-04-14 10:52:00 -07:00
2026-01-07 13:06:08 -08:00
2026-04-03 16:04:27 -07:00
2026-02-26 16:36:24 -08:00
2026-04-21 20:17:42 -07:00
2026-06-11 09:03:00 -07:00
2025-08-11 10:31:01 -07:00
2026-06-10 00:30:43 -07:00
2026-06-10 00:30:43 -07:00
2026-06-11 21:56:16 -07:00
2026-05-01 01:14:15 -07:00
2025-11-18 23:18:35 -08:00
2026-06-01 13:03:46 -07:00
2026-04-25 23:06:37 -07:00
2026-06-14 00:16:14 -07:00
2026-03-23 13:35:16 -07:00
2026-01-07 13:06:08 -08:00
2026-05-08 11:03:03 -07:00
2026-06-02 14:45:05 -07:00
2026-02-18 18:20:03 -08:00
2026-06-02 14:45:45 -07:00
2026-05-19 13:03:30 -07:00
2026-02-19 22:52:05 -08:00
2026-06-09 00:48:38 -07:00
2024-07-04 11:00:41 -07:00
2026-04-02 17:37:05 -07:00
2026-04-02 17:37:05 -07:00
2026-04-03 16:04:27 -07:00
2025-12-27 12:25:33 -08:00
2026-05-19 13:03:30 -07:00
2026-03-28 13:24:11 -07:00
2026-01-07 13:06:08 -08:00
2025-11-13 16:10:46 -08:00
2026-04-07 13:21:30 -07:00
2025-08-30 11:15:48 -07:00
2026-04-17 12:23:21 -07:00
2025-11-13 16:10:46 -08:00
2025-12-26 13:21:15 -08:00
2026-04-03 16:04:27 -07:00
2025-11-18 23:18:35 -08:00
2026-05-04 19:14:41 -07:00
2026-05-04 19:14:41 -07:00
2026-04-29 10:06:51 -07:00
2026-04-26 16:31:42 -07:00
2026-05-04 19:21:41 -07:00
2025-11-18 23:18:35 -08:00
2026-05-04 19:21:41 -07:00
2025-10-23 20:10:12 -07:00
2025-11-18 23:18:35 -08:00
2025-12-23 14:48:50 -08:00
2026-05-04 19:14:41 -07:00
2026-05-04 19:14:41 -07:00
2026-06-04 15:33:03 -07:00
2026-06-14 13:54:49 -07:00
2025-12-30 12:40:59 -08:00
2026-05-19 17:34:51 -07:00
2026-05-19 17:34:51 -07:00
2026-03-27 22:50:02 -07:00
2026-06-06 11:20:15 -07:00
2025-10-29 13:43:27 -07:00
2026-06-04 15:33:03 -07:00
2026-05-19 17:35:08 -07:00
2026-02-07 13:27:47 -08:00
2026-06-14 13:54:49 -07:00
2026-03-27 22:50:02 -07:00
2026-05-08 21:54:39 -07:00
2025-08-21 08:28:07 -07:00
2026-02-12 23:11:41 -08:00
2026-03-27 23:15:01 -07:00
2026-03-16 12:58:26 -07:00
2025-08-21 08:28:07 -07:00
2026-01-07 13:06:08 -08:00
2026-03-06 12:35:08 -08:00
2026-04-03 16:04:27 -07:00
2026-06-11 21:56:16 -07:00
2025-10-24 01:45:22 -07:00
2026-05-05 11:26:08 -07:00
2026-06-02 22:01:57 -07:00
2026-05-19 17:35:44 -07:00
2026-06-02 22:01:57 -07:00
2026-01-07 13:06:08 -08:00
2026-02-03 11:55:12 -08:00
2026-06-03 00:28:56 -07:00
2026-05-05 11:26:08 -07:00
2026-02-07 13:27:47 -08:00
2026-05-19 16:03:45 -07:00
2026-05-10 09:39:05 -07:00
2026-05-13 10:48:58 -07:00
2026-01-07 13:06:08 -08:00
2026-06-11 21:56:16 -07:00
2026-04-26 16:31:42 -07:00
2026-01-22 16:56:35 -08:00
2026-06-04 15:33:03 -07:00
2026-03-04 12:52:09 -08:00
2026-05-10 12:08:06 -07:00
2026-05-10 14:55:59 -07:00
2026-06-14 00:16:14 -07:00
2026-05-10 13:34:25 -07:00
2026-05-21 09:35:42 -07:00
2026-06-05 12:41:18 -07:00
2026-05-28 12:55:08 -07:00
2026-06-14 00:16:14 -07:00
2026-05-10 14:55:59 -07:00
2026-05-21 09:35:42 -07:00
2026-06-14 00:16:14 -07:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-01-17 18:40:48 -08:00
2026-05-21 14:05:16 -07:00
2026-03-11 02:28:34 -07:00
2026-04-02 15:59:52 -07:00
2026-05-21 15:48:47 -07:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-04-14 21:52:49 -07:00
2026-06-11 21:56:16 -07:00
2025-07-19 00:49:56 -07:00
2026-02-08 20:06:32 -08:00
2026-06-03 00:12:28 -07:00
2026-06-06 11:20:15 -07:00
2026-05-08 21:35:27 -07:00
2025-07-18 02:19:50 -07:00
2025-07-18 22:25:58 -07:00
2025-12-29 23:54:00 -08:00
2026-06-09 00:48:38 -07:00
2026-03-28 13:24:11 -07:00
2026-06-03 00:12:28 -07:00
2026-06-03 00:12:28 -07:00
2026-06-08 01:12:07 -07:00
2026-05-31 00:13:36 -07:00
2026-06-11 21:56:16 -07:00
2026-06-01 20:01:30 -07:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-03-28 13:24:11 -07:00
2026-02-16 13:59:13 -08:00
2025-12-09 10:24:35 -08:00
2026-05-03 18:52:45 -07:00
2026-03-09 11:54:32 -07:00
2026-05-18 19:44:19 -07:00
2026-06-07 00:32:20 -07:00
2026-04-03 16:04:27 -07:00
2026-04-25 23:06:37 -07:00
2025-11-18 23:18:35 -08:00
2026-01-07 13:06:08 -08:00
2026-03-30 12:11:30 -07:00
2026-05-05 19:14:44 -07:00
2026-05-05 19:14:44 -07:00
2026-02-23 22:59:53 -08:00
2026-04-02 15:59:09 -07:00
2026-04-02 17:37:05 -07:00
2026-05-05 19:14:44 -07:00
2026-02-10 17:57:08 -08:00
2026-05-19 14:24:25 -07:00
2026-05-19 14:24:25 -07:00
2026-01-07 13:06:08 -08:00
2026-06-11 21:56:16 -07:00
2026-06-11 21:56:16 -07:00
2026-05-13 10:48:58 -07:00
2026-05-13 10:48:58 -07:00
2026-05-13 10:48:58 -07:00
2024-07-04 11:00:41 -07:00
2025-08-14 20:38:03 -07:00
2026-04-26 16:31:42 -07:00
2026-05-13 09:24:59 -07:00
2026-05-20 10:13:33 -07:00
2026-05-04 22:10:49 -07:00
2026-03-06 15:22:39 -08:00
2026-05-04 22:10:49 -07:00
2025-07-28 02:49:43 -07:00
2026-01-30 22:57:05 -08:00