Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No detection of bad policy in sts.GetFederationToken #10746

Open
1 task done
wunderbarb opened this issue Apr 29, 2024 · 0 comments
Open
1 task done

No detection of bad policy in sts.GetFederationToken #10746

wunderbarb opened this issue Apr 29, 2024 · 0 comments
Labels
aws:iam AWS Identity and Access Management status: backlog Triaged but not yet being worked on type: bug Bug report

Comments

@wunderbarb
Copy link

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

localstack accepts policy with a defined Principal. This is not true for real AWS.
Example: { "Version":"2012-10-17", "Statement":[ { "Sid":"AllowUploads", "Effect":"Allow", "Principal":{"AWS":"*"}, "Action":"s3:PutObject", "Resource":"arn:aws:s3:::%s/*" } ] }

Expected Behavior

There should be an error Policy document should not specify a principal.

How are you starting LocalStack?

With the localstack script

Steps To Reproduce

How are you starting localstack (e.g., bin/localstack command, arguments, or docker-compose.yml)

docker run localstack/localstack

Client commands (e.g., AWS SDK code snippet, or sequence of "awslocal" commands)

awslocal s3 mb s3://mybucket

Environment

- OS: Ubuntu 20.4
- LocalStack: 3.2.1.dev20240307125457
Version Pro

Anything else?

No response

@wunderbarb wunderbarb added status: triage needed Requires evaluation by maintainers type: bug Bug report labels Apr 29, 2024
@MarcelStranak MarcelStranak added status: backlog Triaged but not yet being worked on aws:iam AWS Identity and Access Management and removed status: triage needed Requires evaluation by maintainers labels Apr 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
aws:iam AWS Identity and Access Management status: backlog Triaged but not yet being worked on type: bug Bug report
Projects
None yet
Development

No branches or pull requests

2 participants