Maxim 7d2d2a891d Access Requests: Add Resource-Scoped Constraints (#60123) ...

* feat: Extend `AWSRole` struct w/ `RequiresRequest`

- Differentiate between already-granted vs. requestable AWSRoles when
  including requestable resources in `clusterUnifiedResourcesGet`
  req

* feat: Implement Resource Constraints support for Proxy, Auth

* fixup: Fix tests

* test: Add tests for resourceaccessid-related helpers

* fixup: Address code review feedback

* test: Update identity/events tests for new `ResourceAccessID` fields

* fixup: Expand/improve godocs/comments for sentinel ResourceID handling

* fixup: Address code review feedback

* feat: Conv ResourceID->ResourceAccessID at cert decoding

- Convert ResourceIDs present on certs to ResourceAccessIDs at decoding
  time, rather than at each callsite. Update tests/usages of tlsca/sshca
  Identities to reflect this.

2026-01-27 14:51:52 +00:00

..

access_request_test.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

access_request.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00