-
Notifications
You must be signed in to change notification settings - Fork 82
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: limit dataset role permissions #497
Commits on May 26, 2023
-
fix: Fix typo that destroys storage locations (#481)
### Feature or Bugfix - Bugfix ### Detail The constant to define the dataallPivotRole missed an "a" and as a consequence the storage location for the Dataset was not registered ### Relates By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Configuration menu - View commit details
-
Copy full SHA for e9c64d7 - Browse repository at this point
Copy the full SHA e9c64d7View commit details
Commits on May 30, 2023
-
Update CDK Version to v2.77.0 to fix issue with CDK Pipeline role (#484)
### Feature or Bugfix - Bugfix - Refactoring ### Detail - The AWS Cloud Development Kit (CDK) Team recently identified an issue with the CDK Pipelines construct library that may result in unintended permissions being granted to authenticated users within your account. As of April 4, 2023, we have fixed the issue in version 1.200.0 [1] for CDK v1, and version 2.77.0 [2] for CDK v2. We strongly recommend you upgrade to one of these versions as soon as possible. Please refer to the Managing Dependencies documentation [3] in the CDK Developer Guide for instructions on how to perform the upgrade. Starting with versions 1.158.0 and 2.26.0, released May 30, 2022, the library creates a role that allows every identity in the same account with sts:AssumeRole permissions on Resource: * to assume it. This may result in granting privileges to authenticated users in your account allowing them to take pipeline actions beyond what was intended. ### Relates - N.A By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Configuration menu - View commit details
-
Copy full SHA for 9fc84bf - Browse repository at this point
Copy the full SHA 9fc84bfView commit details
Commits on Jun 1, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 7844c1f - Browse repository at this point
Copy the full SHA 7844c1fView commit details -
Configuration menu - View commit details
-
Copy full SHA for 8ece706 - Browse repository at this point
Copy the full SHA 8ece706View commit details -
fix: safe removal of consumption roles with open share requests (#485)
### Feature or Bugfix - Bugfix ### Detail - Added check and exception if there are open share requests on a consumption role or on a group that we are removing from an environment ### Relates - #450 By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Configuration menu - View commit details
-
Copy full SHA for fa45abd - Browse repository at this point
Copy the full SHA fa45abdView commit details
Commits on Jun 6, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 02f6cde - Browse repository at this point
Copy the full SHA 02f6cdeView commit details -
Merge remote-tracking branch 'origin/feature/limit-dataset-role-permi…
…ssions' into feature/limit-dataset-role-permissions # Conflicts: # backend/dataall/cdkproxy/stacks/dataset.py
Configuration menu - View commit details
-
Copy full SHA for 7330e20 - Browse repository at this point
Copy the full SHA 7330e20View commit details -
Configuration menu - View commit details
-
Copy full SHA for 2d61bea - Browse repository at this point
Copy the full SHA 2d61beaView commit details
Commits on Jun 7, 2023
-
Finish restriction for users in dataset roles + enforced crawler + ch…
…anges in read environment bucket - missing:errors on profiling jobs and KMS key of environment bucket
Configuration menu - View commit details
-
Copy full SHA for 36e8e33 - Browse repository at this point
Copy the full SHA 36e8e33View commit details -
Configuration menu - View commit details
-
Copy full SHA for 4117f94 - Browse repository at this point
Copy the full SHA 4117f94View commit details -
Configuration menu - View commit details
-
Copy full SHA for d8b067f - Browse repository at this point
Copy the full SHA d8b067fView commit details -
Configuration menu - View commit details
-
Copy full SHA for 2c5d361 - Browse repository at this point
Copy the full SHA 2c5d361View commit details
Commits on Jun 9, 2023
-
Configuration menu - View commit details
-
Copy full SHA for bbd0fcc - Browse repository at this point
Copy the full SHA bbd0fccView commit details