US West: Access Control Service (ACS) Scheduled Maintenance
Scheduled Maintenance
Report for Predix
Completed
The scheduled maintenance has been completed.
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Update
We will be undergoing scheduled maintenance during this time.
Scheduled
GE Digital appreciates and values your business. As part of our efforts to continuously improve our product offerings, Access Control Service (ACS) is changing the way resource URI templates in access policies are being processed. Currently, URI variables in resource URI templates could match multiple path segments in actual resource URL, including leading and tailing slashes. After update, URI variables by default will be restricted to a single path segment
# Implementation Schedule
Start Time – June 17, 2022 5:00 PM PT
End Time – June 17, 2022 6:00 PM PT
# No Action required if actual resource URI patterns match single path segment in policy URI template. For example:
Resource URI template in policy: /service/{path}/abc
Actual resource URI: /service/evidence/abc
Path: evidence
# User Action required if actual resource URI patterns match multiple path segments in policy URI template. For example:
Resource URI template in policy: /service/{path}/abc
Actual resource URI: /service/evidence/details/abc
Path: evidence/details
# User Action
Before June 17, 2022, affected URI templates in ACS policy need to be updated to avoid any “access denied (403)” errors accessing resources.
There are multiple ways to update URI template to satisfy new requirement:
1. Using the multiple context variables
Example:
Actual resource URI: /service/evidence/details/abc
Current URI template: /service/{path}/abc
Updated URI template: /service/{context1}/{context2}/abc
2. By explicitly allowing multi-segment matching:
Example:
Actual resource URI: /service/evidence/details/abc
Current URI template: /service/{path}/abc
Updated URI template: /service/{path:(?:/\\w+)+}/abc
# Implementation Schedule
Start Time – June 17, 2022 5:00 PM PT
End Time – June 17, 2022 6:00 PM PT
# No Action required if actual resource URI patterns match single path segment in policy URI template. For example:
Resource URI template in policy: /service/{path}/abc
Actual resource URI: /service/evidence/abc
Path: evidence
# User Action required if actual resource URI patterns match multiple path segments in policy URI template. For example:
Resource URI template in policy: /service/{path}/abc
Actual resource URI: /service/evidence/details/abc
Path: evidence/details
# User Action
Before June 17, 2022, affected URI templates in ACS policy need to be updated to avoid any “access denied (403)” errors accessing resources.
There are multiple ways to update URI template to satisfy new requirement:
1. Using the multiple context variables
Example:
Actual resource URI: /service/evidence/details/abc
Current URI template: /service/{path}/abc
Updated URI template: /service/{context1}/{context2}/abc
2. By explicitly allowing multi-segment matching:
Example:
Actual resource URI: /service/evidence/details/abc
Current URI template: /service/{path}/abc
Updated URI template: /service/{path:(?:/\\w+)+}/abc
