Project

General

Profile

Feature #62464

Updated by Casey Bodley 9 months ago

allow iam policies to require MFA 

 https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_configure-api-require.html#MFAProtectedAPI-policies 
 https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html#example-bucket-policies-MFA 

 we do support the @x-amz-mfa@ header and validate that in @RadosUser::verify_mfa()@, but i don't think we have access to a timestamp to calculate a @aws:MultiFactorAuthAge@. i'm also not sure how this @x-amz-mfa@ support interacts with STS @aws:MultiFactorAuthAge@

Back