aws-lightsail-bucket-access-key-credentials-for
A Lightsail bucket access key authenticates to the bucket's data plane.
match (record)
{
"field": "arn",
"resource_type": "AWS::Lightsail::Bucket"
}
emit
| source | <bucket access-key identity (AccessKey for the bucket data plane)> |
|---|---|
| target | <Lightsail bucket data in scope> |
Narrative
Bucket access key {source.name} authenticates to the data plane of bucket {target.name}.
Raw rule rules/derived/aws/lightsail.yaml
id: aws-lightsail-bucket-access-key-credentials-for
emits: CredentialsFor
description: A Lightsail bucket access key authenticates to the bucket's data plane.
match_record:
resource_type: AWS::Lightsail::Bucket
field: arn
emit:
source: <bucket access-key identity (AccessKey for the bucket data plane)>
target: <Lightsail bucket data in scope>
note: 'Zero-cost link completing the credential chain: the minted/read bucket access key grants data-plane
access to the bucket objects.'
narrative: Bucket access key {source.name} authenticates to the data plane of bucket {target.name}.