fix: backwards compatibility for assumed roles as role formatting

2026-10-20 18:00:54 +00:00 · 2025-10-23 20:36:53 +04:00
parent 02ba35a51e
commit e9c97c9ed3
2 changed files with 6 additions and 6 deletions
@@ -158,7 +158,7 @@ export const identityAwsAuthServiceFactory = ({
          // considers exact matches + wildcard matches
          // heavily validated in router
          const regex = new RE2(`^${principalArn.replaceAll("*", ".*")}$`);
-          return regex.test(formattedArn);
+          return regex.test(formattedArn) || regex.test(extractPrincipalArn(Arn, true));
        });

      if (!isArnAllowed) {