spcl/serverless-benchmarks

Resource-specific permissions for functions

オープン

#215 opened on 2024/07/27

 (0 件のコメント) (0 件のリアクション) (0 人の担当者)Python (99 件のフォーク)auto 404
enhancementgood first issue

Repository metrics

Stars
 (196 個のスター)
PR merge metrics
 (PR metrics pending)

説明

Right now, our functions are created with permissions to access all needed resources, primarily the object storage buckets and in future key-value storage tables (PR #214)

Instead, we could make SeBS more secure with two additions: allocate permissions only to objects we allocate (e.g. by using prefix sebs-{resource_id} everywhere), and give each function only permissions associated with resources for that specific benchmark.

コントリビューターガイド