Skip to content

Commit 7548ab2

Browse files
committed
Support any principal ("*") in STS role policies
Signed-off-by: Ben <[email protected]>
1 parent 7b46193 commit 7548ab2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/endpoint/sts/sts_rest.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -216,7 +216,7 @@ function _is_statements_fit(statements, method, cur_account_email) {
216216
// who can do that action
217217
for (const principal of statement.principal) {
218218
dbg.log0('assume_role_policy: principal fit?', principal.unwrap().toString(), cur_account_email);
219-
if (principal.unwrap() === cur_account_email) {
219+
if ((principal.unwrap() === cur_account_email) || (principal.unwrap() === '*')) {
220220
principal_fit = true;
221221
}
222222
}

0 commit comments

Comments
 (0)