From b804513003ceb5e5bdb16da35dbd9560f5ea8e37 Mon Sep 17 00:00:00 2001 From: Alan Shaw Date: Thu, 22 Oct 2026 12:59:41 +0100 Subject: [PATCH] feat(s3/bucket): allow s3:BypassGovernanceRetention in policies A principal may be granted the right to delete or shorten a governance-locked version, as S3 allows in a bucket policy. Hilt prices the bypass header on the delete and retention operations against it. Co-Authored-By: Claude Fable 5.1 --- commands/s3/bucket/policy_json.go | 1 + 1 file changed, 1 insertion(+) diff --git a/commands/s3/bucket/policy_json.go b/commands/s3/bucket/policy_json.go index 7c06180..a6c4619 100644 --- a/commands/s3/bucket/policy_json.go +++ b/commands/s3/bucket/policy_json.go @@ -51,6 +51,7 @@ const MaxSetSize = 4096 // holds s3:ListAllMyBuckets. Reading that configuration is a policy action. var policyActions = sorted([]string{ "s3:AbortMultipartUpload", + "s3:BypassGovernanceRetention", "s3:DeleteObject", "s3:DeleteObjectTagging", "s3:DeleteObjectVersion",