5 Commits

Author	SHA1	Message	Date
overtrue	1a598ae7c0	test(kms): add an end-to-end negative authorization matrix ... Covers the admin and SSE-KMS planes for a wrong identity, a wrong key, a wrong action and an explicit Deny, each preceded by a positive control so a denial cannot be an unpropagated policy. SSE-S3 and unencrypted objects are asserted to stay exempt.	2026-08-02 02:56:54 +08:00
cxymds	866ac5073d	fix(kms): validate configured backend cleanup (#5204) ... test(kms): validate configured backend cleanup	2026-07-24 23:24:40 +08:00
Ramakrishna Chilaka	eb85607e37	fix(s3): allow CopyObject to restore a historical object version (#4250)	2026-07-04 10:36:42 +08:00
guojidan	ef0dbaaeb5	feat(encryption): add managed encryption support for SSE-S3 and SSE-KMS (#583) ... Signed-off-by: junxiang Mu <1948535941@qq.com>	2025-09-24 02:09:04 -07:00
guojidan	9ddf6a011d	feature: support kms && encryt (#573) ... * feat(kms): implement key management service with local and vault backends Signed-off-by: junxiang Mu <1948535941@qq.com> * feat(kms): enhance security with zeroize for sensitive data and improve key management Signed-off-by: junxiang Mu <1948535941@qq.com> * remove Hashi word Signed-off-by: junxiang Mu <1948535941@qq.com> * refactor: remove unused request structs from kms handlers Signed-off-by: junxiang Mu <1948535941@qq.com> --------- Signed-off-by: junxiang Mu <1948535941@qq.com>	2025-09-22 17:53:05 +08:00