Add content-sha256 as a default allowed STS header (#10009)

Also, alphabetize those headers... just because.
hashicorp · Sep 22, 2020 · 49b33d9 · 49b33d9
1 parent 48e328c
commit 49b33d9
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/builtin/credential/aws/backend.go b/builtin/credential/aws/backend.go
@@ -20,10 +20,11 @@ import (
 const amzHeaderPrefix = "X-Amz-"
 
 var defaultAllowedSTSRequestHeaders = []string{
-	"X-Amz-Date",
+	"X-Amz-Algorithm",
+	"X-Amz-Content-Sha256",
 	"X-Amz-Credential",
+	"X-Amz-Date",
 	"X-Amz-Security-Token",
-	"X-Amz-Algorithm",
 	"X-Amz-Signature",
 	"X-Amz-SignedHeaders"}