ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-04 02:04:06 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
30ad5249d3de5d38f896a29a74bb6dfed1cc4292
prowler/api/changelog.d/s3-report-download-sigv4.fixed.md
T
Pujitha Paladugu 50a9138bea fix(api): sign report download URLs with SigV4 when the bucket region is set (#12746) 
When DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION is set, get_s3_presign_client() signs download URLs with SigV4, path-style, against the regional host, so SSE-KMS buckets no longer reject them with InvalidArgument. Without a region or a public endpoint, URLs are signed as before, and get_s3_client() is unchanged.

Fixes #12734
2026-09-22 16:12:44 +02:00

251 B
Raw Blame History

Scan report downloads from an S3 bucket with default SSE-KMS encryption no longer fail with an InvalidArgument error: when DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION is set, presigned download URLs are signed with AWS Signature Version 4 for that region

Reference in New Issue View Git Blame Copy Permalink