Bug 2310485 - [rgw] PutBucketPolicy for a bucket is failing with not a valid action if we include s3:GetObjectAttributes in the actions list
Summary: [rgw] PutBucketPolicy for a bucket is failing with not a valid action if we i...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: RGW
Version: 8.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 8.0
Assignee: Matt Benjamin (redhat)
QA Contact: Hemanth Sai
URL:
Whiteboard:
Depends On:
Blocks: 2317218
TreeView+ depends on / blocked
 
Reported: 2024-09-06 18:05 UTC by Hemanth Sai
Modified: 2025-03-26 04:26 UTC (History)
6 users (show)

Fixed In Version: ceph-19.1.1-27.el9cp
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2024-11-25 09:09:10 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHCEPH-9720 0 None None None 2024-09-06 18:05:51 UTC
Red Hat Product Errata RHBA-2024:10216 0 None None None 2024-11-25 09:09:15 UTC

Description Hemanth Sai 2024-09-06 18:05:12 UTC
Description of problem:
PutBucketPolicy for a bucket is failing with not a valid action if we specify s3:GetObjectAttributes in the actions list


[cephuser@ceph-pri-hsm-squid-j9zu1f-node6 ~]$ cat bkt_policy.json 
{
   "Statement": [
      {
         "Effect": "Allow",
         "Principal": "*",
         "Action": ["s3:GetObject", "s3:GetObjectAttributes"],
         "Resource": "arn:aws:s3:::*"
      }
   ]
}

[cephuser@ceph-pri-hsm-squid-j9zu1f-node6 ~]$ 
[cephuser@ceph-pri-hsm-squid-j9zu1f-node6 ~]$ aws --endpoint-url http://10.0.67.73:80 s3api put-bucket-policy --bucket bkt1 --policy file://bkt_policy.json

An error occurred (InvalidArgument) when calling the PutBucketPolicy operation: At character offset 143, `s3:GetObjectAttributes` is not a valid action.
[cephuser@ceph-pri-hsm-squid-j9zu1f-node6 ~]$ 


Version-Release number of selected component (if applicable):
ceph version 19.1.0-71.el9cp

How reproducible:
always

Steps to Reproduce:
1.deploy cluster on 8.0 with rgw daemons
2.create a bucket
3.PutBucketPolicy with s3:GetObjectAttributes as the policy action. it fails with not a valid action.

Actual results:
PutBucketPolicy fails with `s3:GetObjectAttributes` is not a valid action

Expected results:
Expected s3:GetObjectAttributes is also a valid bucket policy action

Additional info:

Comment 8 errata-xmlrpc 2024-11-25 09:09:10 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:10216

Comment 9 Red Hat Bugzilla 2025-03-26 04:26:06 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days


Note You need to log in before you can comment on or make changes to this bug.