feat: dynamic assume-role support for the AWS S3 service (+ IAM fixes & cleanup)#11

Draft

davidf-null wants to merge 15 commits into

mainfrom

feature/dynamic-assume-role

Commits on May 28, 2026

feat: add dynamic assume role support via assume_role_arn in values.yaml

David Fernandez
and
claude
committed
docs: add assume role configuration instructions to README

David Fernandez
and
claude
committed

Commits on May 29, 2026

feat(requirements): add assume role support to requirements module

David Fernandez
and
claude
committed
chore: set assume_role_arn for providers-test cluster simulation

David Fernandez
and
claude
committed
fix: add -reconfigure to tofu init to handle stale backend state in OUTPUT_DIR

David Fernandez
and
claude
committed
fix: auto-install aws CLI in build_context when not available in pod PATH

David Fernandez
and
claude
committed
revert: fix: auto-install aws CLI in build_context when not available in pod PATH
David Fernandez
committed
fix: add missing S3 bucket read permissions required by AWS provider

David Fernandez
and
claude
committed
fix: use correct IAM action name s3:GetReplicationConfiguration

David Fernandez
and
claude
committed
fix: correct IAM action names for encryption (Get/PutEncryptionConfiguration)

David Fernandez
and
claude
committed
fix(permissions): unset inherited credentials before assume_role to prevent self-assume failure

David Fernandez
and
claude
committed

Commits on Jun 1, 2026

fix: always export link context vars and improve error visibility in build_context

David Fernandez
and
claude
committed

Commits on Jun 3, 2026

chore: remove committed account ARN and local credentials, document changes

David Fernandez
and
claude
committed

Commits on Jun 5, 2026

feat: resolve assume_role_arn from nullplatform IAM provider by selector

David Fernandez
and
claude
committed

Commits on Jun 9, 2026

refactor(workflows): assume role in a dedicated first step

David Fernandez
and
claude
committed