[RANGER-1950] KMS policies should support wildcard patterns on keys

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: kms
• Assignee: Unassigned
• Reporter: Owen O'Malley
• Created: 09/Jan/18 16:16
• Updated: 24/Jan/18 20:03

Description

It was pretty unclear as a user that "*" is a special case for KMS Ranger policies and that in general it has to be a literal match. In particular, I was expecting a policy with "pii*" to match both "pii" and "pii256". The current code only supports "*" or literal lists of the kms key names (eg. "pii", "pii256".