minio/docs
1
0
Fork 0
mirror of https://github.com/minio/docs.git synced 2025-07-30 07:03:26 +03:00
Code Activity

Multiple SERVER Releases (#1141)

Browse Source 
MinIO SERVER RELEASE.2024-01-05T22-17-24Z - added new metrics to
github.com/minio/minio for later sync

MinIO SERVER RELEASE.2024-01-28T22-35-53Z - MinIO preallocates memory,
mc update compresses binary in transit MinIO SERVER
RELEASE.2024-02-06T21-36-22Z -

MinIO adds condition key for restricting STS AssumeRoleWithWebIdentity
duration at policy level

Closes #1124 , 

Partially addresses #1116 
Partially Addresses #1105


---------

Co-authored-by: Daryl White <53910321+djwfyi@users.noreply.github.com>
This commit is contained in:
Ravind Kumar
2024-03-11 10:06:46 -04:00
committed by GitHub
parent 54584b290c
commit 67e81ce2f8
11 changed files with 179 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
source/administration/identity-access-management/policy-based-access-control.rst
View File

@ -675,6 +675,40 @@ MinIO supports the following condition keys for all supported
For additional keys supported by a specific S3 action, see the reference documentation for that action.
MinIO Extended Condition Keys
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
MinIO extends the S3 standard condition keys with the following extended key:
``sts:DurationSeconds``
.. versionadded:: MinIO SERVER RELEASE.2024-02-06T21-36-22Z
Specify a time in seconds to limit the duration of *all* Security Token Service credentials generated by :ref:`minio-sts-assumerolewithwebidentity`.
This value overrides the ``DurationSeconds`` field specified to the client.
For example:
.. code-block:: json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"sts:AssumeRoleWithWebIdentity"
],
"Condition": {
"NumericLessThanEquals": {
"sts:DurationSeconds": "300"
}
}
}
]
}
.. _minio-policy-mc-admin-actions:
``mc admin`` Policy Action Keys