open-policy-agent/opa

Support generation of Presigned URLs in AWS signer

Opened this issue · 2 comments

What is the underlying problem you're trying to solve?

AWS signer supports presigning but it is only making the signed request valid at a later point in time, essentially setting the x-amz-date to late timestamp.
It will be good if the OPA aws signer can also support generating Presigned URLs. https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-presigned-url.html
This is typically a config in the AWS SDK in the signable request whether to sign or presign. If presign is selected it generates a single URL that contains all the signing related headers encoded in the url.

Describe the ideal solution

Add option in the signer to generate Presigned URLs.

Describe a "Good Enough" solution

Additional Context

If your goal is to generate a string that is the pre-signed URL, I think that might be a good case for a new builtin that simply shares a bunch of the signing logic. 🤔

Maybe something like providers.aws.pre_sign_req?

This issue has been automatically marked as inactive because it has not had any activity in the last 30 days. Although currently inactive, the issue could still be considered and actively worked on in the future. More details about the use-case this issue attempts to address, the value provided by completing it or possible solutions to resolve it would help to prioritize the issue.