[ceph-users] Re: Using ID of a federated user in a bucket policy in RGW

2021-05-12 Thread Pritha Srivastava
Hi, Can you try with the following ARN: arn:aws:iam:::user/oidc$7f71c7c5-c24f-418e-87ac-aa8fe271289b The format of the user id is: $$ , and in $oidc$7f71c7c5-c24f-418e-87ac-aa8fe271289b, the '$' before oidc is a separator for a tenant which is empty here, and ARN for a user is of the format: arn

[ceph-users] Re: Using ID of a federated user in a bucket policy in RGW

2021-05-13 Thread Daniel Iwan
Hi Pritha This is probably the only combination I haven't tried. I was convinced it would have to be $oidc$ It worked brilliantly with the arn you suggested, thank you for that. So does it mean that for a non-empty tenant we would have tenant name twice like arn:aws:iam::mytenant:user/mytenant$oi

[ceph-users] Re: Using ID of a federated user in a bucket policy in RGW

2021-05-13 Thread Pritha Srivastava
It would be the second one: arn:aws:iam::mytenant:user/oidc$7f71c7c5-c24f-418e-87ac-aa8fe271289b Thanks, Pritha On Thu, May 13, 2021 at 3:54 PM Daniel Iwan wrote: > Hi Pritha > > This is probably the only combination I haven't tried. > I was convinced it would have to be $oidc$ > It worked bril