Skip to content

feat(iam): cache the effective S3 action set per bucket - #155

Closed
pyropy wants to merge 1 commit into
mainfrom
srdjan/feat/iam-permission-set
Closed

pyropy wants to merge 1 commit into
mainfrom
srdjan/feat/iam-permission-set

Conversation

@pyropy

@pyropy pyropy commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

DelegationCache gains a TTL'd per-bucket action set alongside the
delegation index. Permits reports whether a cached set allows an action
and whether a set is cached at all, so a caller with no set defers to
Hilt instead of deciding. The set is keyed by the bucket DID Hilt named
and lives in the same per-access-key store as the chains, so an
invalidation drops both.

No caller yet; the fast path starts consulting it in the next change.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com


Stack created with GitHub Stacks CLI • Give Feedback 💬

DelegationCache gains a TTL'd per-bucket action set alongside the
delegation index. Permits reports whether a cached set allows an action
and whether a set is cached at all, so a caller with no set defers to
Hilt instead of deciding. The set is keyed by the bucket DID Hilt named
and lives in the same per-access-key store as the chains, so an
invalidation drops both.

No caller yet; the fast path starts consulting it in the next change.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@pyropy

pyropy commented Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Opened by mistake by a stack re-submit; this branch's PR #132 was already closed as superseded by the per-key marker design in fil-one/RFC#30 (f61f474). Branch kept.

@pyropy pyropy closed this Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant