Right now, the best way to ensure the user-bucket permissions have been set up correctly is to run a job and see it succeed.
However, even our fastest jobs take minutes to run and in a busy deployment it could take hours for the job to work through the queue.
It would be nice to provide a /check-bucket/{bucket_name} endpoint which would check the permissions and provide immediate feedback, or potentially even check this in the API every time a job is submitted with user-bucket specified.
However, with #3108, it would be hard to check each role (I think?). Would something like the policy simulator work and can we hit it programmatically?
Right now, the best way to ensure the user-bucket permissions have been set up correctly is to run a job and see it succeed.
However, even our fastest jobs take minutes to run and in a busy deployment it could take hours for the job to work through the queue.
It would be nice to provide a
/check-bucket/{bucket_name}endpoint which would check the permissions and provide immediate feedback, or potentially even check this in the API every time a job is submitted with user-bucket specified.However, with #3108, it would be hard to check each role (I think?). Would something like the policy simulator work and can we hit it programmatically?