Skip to content

KMS

1 page

  • IAM Policy Reloads: Lock Scope, Cancellation, and Time Budgets

    In Design

    DesignIAMKMSS3Review

    IAM Policy Reloads: Lock Scope, Cancellation, and Time Budgets

    Commit 1b5477f3d (pgsty/silo#251, shipped in Server 20261026) resolves two coupled failure modes under slow KMS/KES responses: Authentication-cache lock contention: ListPolicies and ListPolicyDocs now load and decrypt policy replacements outside the …

    Commit 1b5477f3d (pgsty/silo#251, shipped in Server 20261026) resolves two coupled failure modes under slow KMS/KES responses: Authentication-cache lock contention: ListPolicies and ListPolicyDocs now load and decrypt policy replacements outside the …