Skip to content

Commit b8d210b

Browse files
Hemanth Sai MaheswarlaHemanth Sai Maheswarla
authored andcommitted
adding support for testing sts multipart hotfix with static role and session policies and extended s3 action list
Signed-off-by: Hemanth Sai Maheswarla <hemanthsaimaheswarla@Hemanths-MacBook-Pro.local>
1 parent dab3758 commit b8d210b

File tree

3 files changed

+2428
-0
lines changed

3 files changed

+2428
-0
lines changed
Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
# polarion test case id: CEPH-83593390
2+
# test scripts : test_sts_using_boto_session_policy.py
3+
config:
4+
user_count: 2
5+
user_type: tenanted
6+
# bucket_count: 2
7+
# objects_count: 1
8+
# objects_size_range:
9+
# min: 5
10+
# max: 15
11+
test_ops:
12+
create_bucket: true
13+
create_object: true
14+
expected_allowed_actions: ["GetObject", ""]
15+
same_bucket_owner_and_principal: False
16+
verify_static_sts_role_session_policy: False
17+
sts:
18+
trust_policy:
19+
"Version": "2012-10-17"
20+
"Statement":
21+
[
22+
{
23+
"Effect": "Allow",
24+
"Principal":
25+
{
26+
"AWS":
27+
["arn:aws:iam::<tenant_name>:user/<user_name>"],
28+
},
29+
"Action": ["sts:AssumeRole"],
30+
},
31+
]
32+
role_policy:
33+
"Version": "2012-10-17",
34+
"Statement":
35+
[
36+
{
37+
"Effect": "Allow",
38+
"Action": [
39+
"s3:GetObject",
40+
"s3:ListBucketMultipartUploads",
41+
"s3:ListMultipartUploadParts",
42+
"s3:GetBucketLocation",
43+
"s3:ListBucket",
44+
"s3:ListAllMyBuckets",
45+
"s3:AbortMultipartUpload",
46+
"s3:DeleteObject",
47+
"s3:PutObject"
48+
],
49+
"Resource": "arn:aws:s3::<tenant_name>:*"
50+
}
51+
]
52+
session_policy:
53+
"Version": "2012-10-17",
54+
"Statement":
55+
[
56+
{
57+
"Effect": "Allow",
58+
"Action": [
59+
"s3:GetBucketLocation",
60+
"s3:ListBucket*"
61+
],
62+
"Resource": [
63+
"arn:aws:s3::<tenant_name>:<bucket_name>"
64+
]
65+
},
66+
{
67+
"Effect": "Allow",
68+
"Action": [
69+
"s3:Get*",
70+
"s3:PutObject",
71+
"s3:PutObjectAcl",
72+
"s3:DeleteObject",
73+
"s3:AbortMultipartUpload"
74+
],
75+
"Resource": [
76+
"arn:aws:s3::<tenant_name>:<bucket_name>/warehouse",
77+
"arn:aws:s3::<tenant_name>:<bucket_name>/warehouse/*",
78+
"arn:aws:s3::<tenant_name>:<bucket_name>/warehouse/"
79+
]
80+
},
81+
{
82+
"Effect": "Allow",
83+
"Action": [
84+
"s3:DeleteObject"
85+
],
86+
"Resource": [
87+
"arn:aws:s3::<tenant_name>:<bucket_name>"
88+
]
89+
}
90+
]

0 commit comments

Comments
 (0)