diff options
| author | Eirik Nygaard <eirik.nygaard@yahooinc.com> | 2022-05-24 15:45:46 +0200 |
|---|---|---|
| committer | Eirik Nygaard <eirik.nygaard@yahooinc.com> | 2022-05-25 09:44:24 +0200 |
| commit | 340bdc4f860e934f1a3eb11084661c13900bdb28 (patch) | |
| tree | 9ef962234315ec43f78e5d896eb5d25a04bbc8df /controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java | |
| parent | 3f3507a56dfafe8e3eea8500ce36584642c71434 (diff) | |
Use ArchiveAccess instead of directly accessing AWS IAM role
Diffstat (limited to 'controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java')
| -rw-r--r-- | controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java index 389d815249d..46e7fb48553 100644 --- a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java +++ b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/integration/archive/ArchiveService.java @@ -3,6 +3,7 @@ package com.yahoo.vespa.hosted.controller.api.integration.archive; import com.yahoo.config.provision.TenantName; import com.yahoo.config.provision.zone.ZoneId; +import com.yahoo.vespa.hosted.controller.tenant.ArchiveAccess; import java.net.URI; import java.util.Map; @@ -18,9 +19,7 @@ public interface ArchiveService { ArchiveBucket createArchiveBucketFor(ZoneId zoneId); - void updateBucketPolicy(ZoneId zoneId, ArchiveBucket bucket, Map<TenantName, String> authorizeIamRoleByTenantName); - - void updateKeyPolicy(ZoneId zoneId, String keyArn, Set<String> tenantAuthorizedIamRoles); + void updatePolicies(ZoneId zoneId, Set<ArchiveBucket> buckets, Map<TenantName,ArchiveAccess> authorizeAccessByTenantName); boolean canAddTenantToBucket(ZoneId zoneId, ArchiveBucket bucket); |