]> git-server-git.apps.pok.os.sepia.ceph.com Git - s3-tests.git/commit
test: verify Requester field is the assumed-role ARN 749/head
authorShreeJejurikar <shreemj8@gmail.com>
Wed, 13 May 2026 15:53:49 +0000 (21:23 +0530)
committerShreeJejurikar <shreemj8@gmail.com>
Thu, 14 May 2026 09:23:09 +0000 (14:53 +0530)
commitaa206bc0614d4207df61ad6156b659a44d555851
treea434e8d39243fdfcc4d3f706e310c64cfc3c13af
parent8f0ae7b404a3a2fcf7038bf1e6bf29544fe9b6a3
test: verify Requester field is the assumed-role ARN

Add a bucket logging test that asserts the standard access log Requester
field is set to the assumed-role ARN (per AWS S3 spec) when a request is
made with STS temporary credentials.

The test creates an IAM role assumable by the alt user, assumes it via
STS, performs an S3 PutObject with the temporary credentials, flushes the
bucket log, and verifies the log record's Requester field matches
arn:aws:sts:::assumed-role/<role>/<session>.

Tracker: https://tracker.ceph.com/issues/71742
Signed-off-by: Shree Jejurikar <shree.jejurikar@gmail.com>
s3tests/functional/test_s3.py