Skip to content

Commit eb949bb

Browse files
authored
fix(s3tables): s3 table bucket read access role uses incorrect permission for s3tables:ListNamespaces (#35420)
…ead access. ### Reason for this change When setting up a S3 Table through AWS CDK `@aws-cdk/aws-s3tables-alpha ` version 2.214.0-alpha.0 the granting of read access adds the action `s3tables:ListNamespace`. That action is invalid according to the AWS Console. ### Description of changes Switching the invalid action `s3tables:ListNamespace` to the correct one called `s3tables:ListNamespaces`. Documentation for the listing of namespaces: https://docs.aws.amazon.com/cli/latest/reference/s3tables/list-namespaces.html. ### Describe any new or updated permissions being added None. ### Description of how you validated changes Unit and integration tests passed. ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 6d451f4 commit eb949bb

File tree

7 files changed

+7
-7
lines changed

7 files changed

+7
-7
lines changed

packages/@aws-cdk/aws-s3tables-alpha/lib/permissions.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
// Read priveleges
33
export const TABLE_BUCKET_READ_ACCESS = [
44
's3tables:Get*',
5-
's3tables:ListNamespace',
5+
's3tables:ListNamespaces',
66
's3tables:ListTables',
77
];
88

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/TableBucketWithGrantIntegTestDefaultTestDeployAssert60E58AB6.template.json

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/grant-read-bucket-all-tables.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
{
1818
"Action": [
1919
"s3tables:Get*",
20-
"s3tables:ListNamespace",
20+
"s3tables:ListNamespaces",
2121
"s3tables:ListTables"
2222
],
2323
"Effect": "Allow",

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/grant-read-bucket.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
{
1818
"Action": [
1919
"s3tables:Get*",
20-
"s3tables:ListNamespace",
20+
"s3tables:ListNamespaces",
2121
"s3tables:ListTables"
2222
],
2323
"Effect": "Allow",

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/grant-read-write-bucket-all-tables.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"s3tables:CreateTable",
2121
"s3tables:DeleteNamespace",
2222
"s3tables:Get*",
23-
"s3tables:ListNamespace",
23+
"s3tables:ListNamespaces",
2424
"s3tables:ListTables",
2525
"s3tables:PutTableBucketMaintenanceConfiguration",
2626
"s3tables:PutTableData",

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/grant-read-write-bucket.template.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
"s3tables:CreateTable",
2121
"s3tables:DeleteNamespace",
2222
"s3tables:Get*",
23-
"s3tables:ListNamespace",
23+
"s3tables:ListNamespaces",
2424
"s3tables:ListTables",
2525
"s3tables:PutTableBucketMaintenanceConfiguration",
2626
"s3tables:PutTableData",

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.table-bucket-with-grants.js.snapshot/tree.json

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)