if (t) {
string role_session = s->info.args.get("RoleSessionName");
if (role_session.empty()) {
+ ldout(s->cct, 0) << "Role Session Name is empty " << dendl;
return result_t::deny(-EACCES);
}
- auto apl = apl_factory->create_apl_web_identity(cct, s, role_session, *t);
+ string role_arn = s->info.args.get("RoleArn");
+ string role_tenant = get_role_tenant(role_arn);
+ auto apl = apl_factory->create_apl_web_identity(cct, s, role_session, role_tenant, *t);
return result_t::grant(std::move(apl));
}
return result_t::deny(-EACCES);