Assigned
Status Update
No update yet.
Comments
ka...@google.com
ka...@google.com
Hello,
Thank you for reaching out. I'm going to create an internal feature request. Please keep in mind that this feature request has to be analyzed and considered by the product team and I can't provide you ETA for it to be delivered. However, you can keep track of the status by following this thread.
at...@google.com
Comment has been deleted.
ia...@keebo.ai
Agree, this would be a neat improvement & make some use cases much easier.
ma...@keebo.ai
Same sentiment as above. Please implement!!
do...@keebo.ai
Agreed this should be done ASAP
Description
Create conditions that combine tag-based and time-based criteria for use with PAM to generate new entitlements, allowing resource tags to be filtered with a time expiration.
How this might work:
resource.matchTag("acesso-dataengineering-dev/product", "product_a") &&
request.time < timestamp("2024-08-27T15:36:41.435Z")
If applicable, reasons why alternative solutions are not sufficient:
Without this, we can’t use PAM to temporarily grant permissions on resources with specific tags.