From fdfe8b7f3486a672f628becd350d90aed07398b0 Mon Sep 17 00:00:00 2001 From: Ken Fukuyama Date: Tue, 26 Mar 2019 09:00:21 +0900 Subject: [PATCH] Fix IAM sample regex This fixes wildcard expressions to appropriate regex. Fixes #1282 Signed-off-by: Ken Fukuyama --- docs/book/comparison-to-other-systems.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/book/comparison-to-other-systems.md b/docs/book/comparison-to-other-systems.md index 280c267866..b1730eea50 100644 --- a/docs/book/comparison-to-other-systems.md +++ b/docs/book/comparison-to-other-systems.md @@ -291,7 +291,7 @@ allow { # actions_match is true if input.action matches one in the list actions_match { # iterate over the actions in the list - actions := ["s3:List*","s3:Get*"] + actions := ["s3:List.*","s3:Get.*"] action := actions[_] # check if input.action matches an action regex.globs_match(input.action, action) @@ -300,7 +300,7 @@ actions_match { # resources_match is true if input.resource matches one in the list resources_match { # iterate over the resources in the list - resources := ["arn:aws:s3:::confidential-data","arn:aws:s3:::confidential-data/*"] + resources := ["arn:aws:s3:::confidential-data","arn:aws:s3:::confidential-data/.*"] resource := resources[_] # check if input.resource matches a resource regex.globs_match(input.resource, resource)