Add content-sha256 as a default allowed STS header (#10009)

Also, alphabetize those headers... just because.
2020-09-22 10:02:37 -07:00 · 2020-09-22 10:02:37 -07:00 · 201fc8fd4d
parent f8599a1670
commit 201fc8fd4d
1 changed files with 4 additions and 3 deletions
--- a/builtin/credential/aws/backend.go
+++ b/builtin/credential/aws/backend.go
@ -20,10 +20,11 @@ import (
 const amzHeaderPrefix = "X-Amz-"

 var defaultAllowedSTSRequestHeaders = []string{
-	"X-Amz-Date",
-	"X-Amz-Credential",
-	"X-Amz-Security-Token",
 	"X-Amz-Algorithm",
+	"X-Amz-Content-Sha256",
+	"X-Amz-Credential",
+	"X-Amz-Date",
+	"X-Amz-Security-Token",
 	"X-Amz-Signature",
 	"X-Amz-SignedHeaders"}