Issues

• API authorizer cannot fetch the Cognito JWKS when all Lambdas run in the VPC: every authenticated call returns 500

  bug
  awslabs/visual-asset-management-system#427 · Filter by author scheurik opened on Oct 11, 2026

• Upload completion skips the executable blocklist check for zero-byte and abandoned uploads and does not bind relativeKey to the initialize record

  bug
  awslabs/visual-asset-management-system#424 · Filter by author scheurik opened on Oct 10, 2026

• Executable blocklist bypassed by a Windows alternate-data-stream suffix in the file name (payload.exe::$DATA)

  bug
  awslabs/visual-asset-management-system#423 · Filter by author scheurik opened on Oct 10, 2026

• Executable blocklist bypassed by a trailing dot, trailing space, or dot-only basename (payload.exe., payload.exe , .exe)

  bug
  awslabs/visual-asset-management-system#420 · Filter by author scheurik opened on Oct 10, 2026

• cdk synth fails with an unsuppressed CDK Nag IAM5 finding whenever an external asset bucket is configured

  bug
  awslabs/visual-asset-management-system#415 · Filter by author scheurik opened on Oct 10, 2026

• Assertion-shape guard fails on development: vacuous recorded-iteration assertion in the assetLinks batch_get helper test

  bug
  awslabs/visual-asset-management-system#414 · Filter by author scheurik opened on Oct 10, 2026
  1

• NOTICE.md lacks an entry for react-diff-viewer-continued; noticeDependencyTables test fails on development

  bug
  awslabs/visual-asset-management-system#413 · Filter by author scheurik opened on Oct 10, 2026

• Executable-extension and MIME blocklist is case-sensitive; .EXE and mixed-case variants bypass it

  bug
  awslabs/visual-asset-management-system#412 · Filter by author scheurik opened on Oct 10, 2026

• Support cross-Region external S3 asset buckets (SNS in bucket Region, regional CMK, cross-Region S3 PrivateLink endpoint)

  enhancement
  awslabs/visual-asset-management-system#410 · Filter by author scheurik opened on Oct 9, 2026

• Asset file keys over the 1024-byte S3 limit are not rejected by validation and return 500

  bug
  awslabs/visual-asset-management-system#407 · Filter by author scheurik opened on Oct 9, 2026
  1

• Asset export signs download URLs for blocklisted file extensions that download/stream refuse

  bug
  awslabs/visual-asset-management-system#406 · Filter by author scheurik opened on Oct 9, 2026

• Docs site build dependencies carry four Critical advisories (tinypool, shell-quote, proxy-addr)

  bugdependencies
  awslabs/visual-asset-management-system#405 · Filter by author scheurik opened on Oct 9, 2026

• WAF Common Rule Set blocks legitimate file requests (.log/.ini names, encoded ../, long paths) and the 429 throttle response carries no CORS headers

  bug
  awslabs/visual-asset-management-system#400 · Filter by author scheurik opened on Oct 9, 2026
  1

• Asset export issues presigned download URLs without the distributable check or a download audit record

  bug
  awslabs/visual-asset-management-system#399 · Filter by author scheurik opened on Oct 9, 2026

• External pipeline bridge enablers: let a pipeline owned by another project/account register, report status and logs into VAMS

  enhancement
  awslabs/visual-asset-management-system#398 · Filter by author scheurik opened on Oct 8, 2026

• Backend: hoist the four BatchGetItem chunk + UnprocessedKeys retry loops into common/dynamodb.py

  enhancement
  awslabs/visual-asset-management-system#395 · Filter by author scheurik opened on Oct 8, 2026
  3

• generate-permissions skill scaffolds a tags contains criterion the constraint API rejects

  bugdocumentation
  awslabs/visual-asset-management-system#391 · Filter by author scheurik opened on Oct 8, 2026
  1

• Authorization recompiles every Casbin policy line on every enforce() call — O(items x policy lines) CPU on all list APIs

  bug
  awslabs/visual-asset-management-system#390 · Filter by author scheurik opened on Oct 8, 2026
  1

• Asset list API performs 2 DynamoDB round trips per asset (N+1), 6-13 s page loads at 100+ assets

  bug
  awslabs/visual-asset-management-system#389 · Filter by author scheurik opened on Oct 8, 2026
  1

• ViewFile.viewerKey.test.tsx fails to run on development: unstubbed PluginRegistry import.meta.glob

  bug
  awslabs/visual-asset-management-system#386 · Filter by author scheurik opened on Oct 5, 2026

• Pipelines: take the output subfolder from the manifest instead of searching the S3 key

  enhancement
  awslabs/visual-asset-management-system#382 · Filter by author scheurik opened on Oct 5, 2026

• S3 lifecycle rules for VAMS staging and pipeline run folders

  enhancement
  awslabs/visual-asset-management-system#381 · Filter by author scheurik opened on Oct 5, 2026

• Video Player: no in-browser viewer for .avi, .flv and .wmv files

  enhancement
  awslabs/visual-asset-management-system#380 · Filter by author scheurik opened on Oct 5, 2026

• Steering and docs accuracy: deprecated Stack.addDependency, NOTICE USD-viewer rows, table-count split

  enhancement
  awslabs/visual-asset-management-system#379 · Filter by author scheurik opened on Oct 5, 2026

• Config validation gaps: credTokenTimeoutSeconds unchecked, misleading root-validator messages, role-name rule

  bug
  awslabs/visual-asset-management-system#378 · Filter by author scheurik opened on Oct 5, 2026