Chris Lu 65f2f1488a iam: test that groups and roles claims reach request-time policy evaluation ...

Drives the full path: AssumeRoleWithWebIdentity embeds the claims in the
session JWT, AuthenticateJWT restores them, and AuthorizeAction evaluates
ForAnyValue:StringEquals on jwt:groups / jwt:roles per bucket. The mock
OIDC provider now carries token claims through and surfaces roles,
matching the real provider.

2026-07-08 01:53:37 -07:00

..

integration

sts: enforce session-policy explicit deny during role chaining (#10103)

2026-06-24 21:38:21 -07:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003)

2026-01-12 10:45:24 -08:00

oidc

iam: test that groups and roles claims reach request-time policy evaluation

2026-07-08 01:53:37 -07:00

policy

feat(iam): principal session tags from OIDC tokens (Phase 3a) (#9321)

2026-05-05 11:43:05 -07:00

providers

iam: surface OIDC groups and roles into the STS session request context for resource-policy ABAC (#10263)

2026-07-08 01:52:39 -07:00

sts

iam: surface OIDC groups and roles into the STS session request context for resource-policy ABAC (#10263)

2026-07-08 01:52:39 -07:00

util

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

utils

Add session policy support to IAM (#8338)

2026-02-13 13:58:22 -08:00

constants.go

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

helpers.go

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

redact_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

redact.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

responses_test.go

s3/iam: reuse one request id per request (#8538)

2026-03-06 15:22:39 -08:00

responses.go

fix(iam): implement CreatePolicyVersion for managed policies (#9795)

2026-06-02 21:35:02 -07:00

validation_test.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00

validation.go

feat(iam): allow caller-supplied AccessKeyId and SecretAccessKey in CreateAccessKey (#9172)

2026-04-22 12:35:55 -07:00