Bucket Policy - CI/CD用語集の定義
bucket policy は、object storageのbucketに直接アタッチされるJSONのアクセスルールで、どのプリンシパルがどのアクションを実行できるかを指定します。設定を誤ったbucket policyは、build artifactやcacheが公開されてしまう主要な原因です。
関連ガイド
IAM Policy - CI/CD Glossary DefinitionAn IAM policy is a document granting or denying identities specific actions on specific resources, the core w…
Least Privilege - CI/CD Glossary DefinitionLeast privilege grants each identity only the permissions it actually needs and no more, so a leaked CI crede…
Presigned URL - CI/CD Glossary DefinitionA presigned URL grants time-limited access to one object in private storage, so CI can upload or download an…