seaislee1209 0f034b7b26 feat: auto-manage Deny policy for project isolation ...

- Add upsert_deny_policy / remove_deny_policy to IAMService
- Auto-update Deny policy when adding/removing projects
- Auto-create Deny policy on sub-account creation
- Deny policy lists all non-authorized projects explicitly
- Verified: cross-project ListAssetGroups and ListApiKeys are blocked
- Updated research report with cross-project API findings (2026-03-28)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 20:30:56 +08:00

..

accounts

feat: password management for admin and sub-accounts

2026-03-21 15:54:35 +08:00

monitor

feat: auto-manage Deny policy for project isolation

2026-03-28 20:30:56 +08:00

__init__.py

feat: initialize AirGate - Volcengine IAM sub-account management platform

2026-03-19 13:03:30 +08:00