Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add PolicyArns to stscreds.AssumeRoleProvider #3249

Merged
merged 4 commits into from Apr 23, 2020

Conversation

diehlaws
Copy link
Contributor

@diehlaws diehlaws commented Apr 3, 2020

To support passing PolicyArns to stscreds.AssumeRoleProvider in the same manner as sts.AssumeRole.

Resolves #3233

jasdel
jasdel previously approved these changes Apr 6, 2020
@diehlaws
Copy link
Contributor Author

diehlaws commented Apr 6, 2020

Need to add this field to stscreds.WebIdentityRoleProvider as well.

@jasdel jasdel dismissed their stale review April 7, 2020 18:15

stscreds.WebIdentityRoleProvider update needed

@jasdel jasdel added the pr/work-in-progress This PR is a draft and needs further work. label Apr 7, 2020
@diehlaws diehlaws merged commit f6443cd into aws:master Apr 23, 2020
aws-sdk-go-automation pushed a commit that referenced this pull request Apr 23, 2020
===

### Service Client Updates
* `service/application-autoscaling`: Updates service API, documentation, and examples
* `service/firehose`: Updates service API and documentation
  * You can now deliver streaming data to an Amazon Elasticsearch Service domain in an Amazon VPC. You can now compress streaming data delivered to S3 using Hadoop-Snappy in addition to Gzip, Zip and Snappy formats.
* `service/mediapackage-vod`: Updates service API and documentation
* `service/pinpoint`: Updates service API and documentation
  * This release of the Amazon Pinpoint API enhances support for sending campaigns through custom channels to locations such as AWS Lambda functions or web applications. Campaigns can now use CustomDeliveryConfiguration and CampaignCustomMessage to configure custom channel settings for a campaign.
* `service/ram`: Updates service API and documentation
* `service/rds`: Updates service API and documentation
  * Adds support for AWS Local Zones, including a new optional parameter AvailabilityZoneGroup for the DescribeOrderableDBInstanceOptions operation.
* `service/storagegateway`: Updates service API and documentation
  * Added AutomaticTapeCreation APIs
* `service/transfer`: Updates service API and documentation
  * This release adds support for transfers over FTPS and FTP in and out of Amazon S3, which makes it easy to migrate File Transfer Protocol over SSL (FTPS) and FTP workloads to AWS, in addition to the existing support for Secure File Transfer Protocol (SFTP).

### SDK Enhancements
* `aws/credentials/stscreds`: Add support for policy ARNs ([#3249](#3249))
  * Adds support for passing AWS policy ARNs to the `AssumeRoleProvider` and `WebIdentityRoleProvider` credential providers. This allows you provide policy ARNs when assuming the role that will further limit the permissions of the credentials returned.
aws-sdk-go-automation added a commit that referenced this pull request Apr 23, 2020
Release v1.30.13 (2020-04-23)
===

### Service Client Updates
* `service/application-autoscaling`: Updates service API, documentation, and examples
* `service/firehose`: Updates service API and documentation
  * You can now deliver streaming data to an Amazon Elasticsearch Service domain in an Amazon VPC. You can now compress streaming data delivered to S3 using Hadoop-Snappy in addition to Gzip, Zip and Snappy formats.
* `service/mediapackage-vod`: Updates service API and documentation
* `service/pinpoint`: Updates service API and documentation
  * This release of the Amazon Pinpoint API enhances support for sending campaigns through custom channels to locations such as AWS Lambda functions or web applications. Campaigns can now use CustomDeliveryConfiguration and CampaignCustomMessage to configure custom channel settings for a campaign.
* `service/ram`: Updates service API and documentation
* `service/rds`: Updates service API and documentation
  * Adds support for AWS Local Zones, including a new optional parameter AvailabilityZoneGroup for the DescribeOrderableDBInstanceOptions operation.
* `service/storagegateway`: Updates service API and documentation
  * Added AutomaticTapeCreation APIs
* `service/transfer`: Updates service API and documentation
  * This release adds support for transfers over FTPS and FTP in and out of Amazon S3, which makes it easy to migrate File Transfer Protocol over SSL (FTPS) and FTP workloads to AWS, in addition to the existing support for Secure File Transfer Protocol (SFTP).

### SDK Enhancements
* `aws/credentials/stscreds`: Add support for policy ARNs ([#3249](#3249))
  * Adds support for passing AWS policy ARNs to the `AssumeRoleProvider` and `WebIdentityRoleProvider` credential providers. This allows you provide policy ARNs when assuming the role that will further limit the permissions of the credentials returned.
@diehlaws diehlaws deleted the stscreds/policyarn branch June 18, 2020 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr/work-in-progress This PR is a draft and needs further work.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

stscreds.AssumeRoleProvider does not expose AssumeRoleInput.PolicyArns
2 participants