Skip to content

Bucket Policy

2 pages
  • SN-2026-004: Object-Scoped Policy Grants Reaching Bucket Mutations

    In Security

    SecurityIAMBucket PolicyS3Authorizationsilo

    SN-2026-004: Object-Scoped Policy Grants Reaching Bucket Mutations

    SN-2026-004 fixes an IAM resource-matching flaw in silo-pkg v3.11.0 (3c24ad1, 1f97549, d8b1fa7) and Server 20260804 (97b7d2804; upstream reference minio/minio#20449): when evaluating bucket-level S3 requests (args.ObjectName == ""), …

    SN-2026-004 fixes an IAM resource-matching flaw in silo-pkg v3.11.0 (3c24ad1, 1f97549, d8b1fa7) and Server 20260804 (97b7d2804; upstream reference minio/minio#20449): when evaluating bucket-level S3 requests (args.ObjectName == ""), …

  • SN-2026-003: s3:versionid Condition Evaluation and Request Condition Hardening

    In Security

    SecurityIAMS3VersioningBucket Policysilo

    SN-2026-003: s3:versionid Condition Evaluation and Request Condition Hardening

    SN-2026-003 and SN-2026-005 cover a set of S3 IAM policy evaluation fixes shipped in Server 20260804 (80c2c9d03, 2f55347f7, eee05a17c, and silo-pkg v3.12.0 commit 2b087a1; pgsty/silo#40, pgsty/silo#53): SN-2026-003 (80c2c9d03): getConditionValues …

    SN-2026-003 and SN-2026-005 cover a set of S3 IAM policy evaluation fixes shipped in Server 20260804 (80c2c9d03, 2f55347f7, eee05a17c, and silo-pkg v3.12.0 commit 2b087a1; pgsty/silo#40, pgsty/silo#53): SN-2026-003 (80c2c9d03): getConditionValues …