]> git-server-git.apps.pok.os.sepia.ceph.com Git - s3-tests.git/commit
test: verify Requester field is the assumed-role ARN 754/head
authorShreeJejurikar <shreemj8@gmail.com>
Wed, 13 May 2026 15:53:49 +0000 (21:23 +0530)
committerShreeJejurikar <shreemj8@gmail.com>
Tue, 26 May 2026 06:51:41 +0000 (12:21 +0530)
commitba986a115faa3c469efc47623d3015686bf15368
tree55484bae036e96a49fe4b675c16eafbe8223a2c3
parent284738f1a20b1cad575c857ff60a564d96dfcd0a
test: verify Requester field is the assumed-role ARN

Add a bucket logging test that asserts the standard access log Requester
field is set to the assumed-role ARN (per AWS S3 spec) when a request is
made with STS temporary credentials.

The test creates an IAM role assumable by the alt user, assumes it via
STS, performs an S3 PutObject with the temporary credentials, flushes the
bucket log, and verifies the log record's Requester field matches
arn:aws:sts:::assumed-role/<role>/<session>.

Tracker: https://tracker.ceph.com/issues/71742
Signed-off-by: Shree Jejurikar <shree.jejurikar@gmail.com>
s3tests/functional/test_s3.py