Skip to content

Commit 9ce494c

Browse files
authored
add s3 policy partition (#1663)
1 parent fb36393 commit 9ce494c

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

pkg/aws/client/client.go

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -417,11 +417,14 @@ func (c *Client) CreateBucket(ctx context.Context, bucket, region string, object
417417
// Handle bucket policy IAM ARN for different partitions (AWS region groups)
418418
// Different available partitions in AWS are defined at
419419
// https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html
420+
// https://github.com/aws/aws-sdk-go-v2/blob/main/internal/endpoints/awsrulesfn/partitions.json
420421
arnPartition := "aws"
421422
if strings.HasPrefix(region, "cn-") {
422423
arnPartition = "aws-cn" // China regions
423424
} else if strings.HasPrefix(region, "us-gov-") {
424425
arnPartition = "aws-us-gov" // AWS GovCloud (US) regions
426+
} else if strings.HasPrefix(region, "eusc-") { // e.g. "eusc-de-east-1"
427+
arnPartition = "aws-eusc" // AWS EUSC region
425428
}
426429

427430
// Set bucket policy to deny non-HTTPS requests

0 commit comments

Comments
 (0)