-
-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add IAM conditionals to s3 bucket policy (aws:SourceARN, aws:SourceAccount, etc) #279
Labels
Comments
3 tasks
This issue has been automatically marked as stale because it has been open 30 days |
This issue was automatically closed because of stale in 10 days |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the solution you'd like.
I would like to be able to add conditional statements to the S3 bucket policy that prevent the confused deputy problem. I would also like it to work alongside the current policy options (alb logging, s3 logging, encryption, etc).
Describe alternatives you've considered.
There aren't any besides creating the policy at a separate resource and linking the s3 bucket created from the module.
Additional context
None
The text was updated successfully, but these errors were encountered: