Use ExpectedBucketOwner param in S3 calls
Open
Beginner friendly
- Dominant language
- Python
- Stars
- 12
- Forks
- 21
- Avg merge
- 5d 19h
- Merged PRs (30d)
- 5
Description
SonarCloud flagged the following lines:
```python
try:
uploads_response = S3_CLIENT.list_multipart_uploads(Bucket=bucket_name)
```
and
```python
try:
file_parts_response = S3_CLIENT.list_parts(
```
For both of these, the message is: "Add the 'ExpectedBucketOwner' parameter to verify S3 bucket ownership."
Contributor guide
Research direction
Search the Python codebase for the list_multipart_uploads and list_parts S3 calls shown in the issue. Start by reading their surrounding upload logic, then ensure both calls verify bucket ownership with the requested parameter and run the relevant existing tests if available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- backend, cloud, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 62/100