Skip to content

Commit

Permalink
ARSN-396: use request context aciton map for the bucket policies
Browse files Browse the repository at this point in the history
The S3 Bucket Policies checks must support and evaluate the same
actions as the ones sent to the IAM checks.
Today, we only check a subset of it, so we missed the Versioned
APIs.
  • Loading branch information
williamlardier committed Feb 14, 2024
1 parent f265ed6 commit 6b64f50
Showing 1 changed file with 1 addition and 6 deletions.
7 changes: 1 addition & 6 deletions lib/policyEvaluator/utils/actionMaps.ts
Original file line number Diff line number Diff line change
Expand Up @@ -77,12 +77,7 @@ const actionMapRQ = {
};

// action map used for bucket policies
const actionMapBP = {
bucketDeleteCors : 's3:PutBucketCORS',
bucketDeleteLifecycle : 's3:PutLifecycleConfiguration',
bucketDeleteReplication : 's3:PutReplicationConfiguration',
...sharedActionMap
};
const actionMapBP = actionMapRQ;

// action map for all relevant s3 actions
const actionMapS3 = {
Expand Down

0 comments on commit 6b64f50

Please sign in to comment.