diff --git a/iam/converter.go b/iam/converter.go index ce1108a..622315e 100644 --- a/iam/converter.go +++ b/iam/converter.go @@ -63,6 +63,7 @@ const ( s3ActionPutObjectTagging = "s3:PutObjectTagging" s3ActionPutObjectVersionACL = "s3:PutObjectVersionAcl" s3ActionPutObjectVersionTagging = "s3:PutObjectVersionTagging" + s3ActionPatchObject = "s3:PatchObject" ) const ( diff --git a/iam/converter_native.go b/iam/converter_native.go index 4f3ab18..64922a0 100644 --- a/iam/converter_native.go +++ b/iam/converter_native.go @@ -60,6 +60,7 @@ var actionToNativeOpMap = map[string][]string{ s3ActionPutObjectTagging: {native.MethodGetContainer, native.MethodHeadObject, native.MethodGetObject, native.MethodPutObject}, s3ActionPutObjectVersionACL: {native.MethodGetContainer, native.MethodGetContainerEACL, native.MethodSetContainerEACL, native.MethodGetObject, native.MethodHeadObject}, s3ActionPutObjectVersionTagging: {native.MethodGetContainer, native.MethodHeadObject, native.MethodGetObject, native.MethodPutObject}, + s3ActionPatchObject: {native.MethodGetContainer, native.MethodGetObject, native.MethodHeadObject, native.MethodPatchObject}, } var containerNativeOperations = map[string]struct{}{ diff --git a/iam/converter_s3.go b/iam/converter_s3.go index d109ca7..820002d 100644 --- a/iam/converter_s3.go +++ b/iam/converter_s3.go @@ -32,6 +32,7 @@ var actionToS3OpMap = map[string][]string{ s3ActionPutObjectLegalHold: {s3ActionPutObjectLegalHold}, s3ActionPutObjectRetention: {s3ActionPutObjectRetention}, s3ActionPutObjectTagging: {s3ActionPutObjectTagging}, + s3ActionPatchObject: {s3ActionPatchObject}, s3ActionListAllMyBuckets: {"s3:ListBuckets"}, s3ActionListBucket: {"s3:HeadBucket", "s3:GetBucketLocation", "s3:ListObjectsV1", "s3:ListObjectsV2"},