Skip to content

Commit a550721

Browse files
author
awstools
committed
feat(client-s3): This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests.
1 parent 635576b commit a550721

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

51 files changed

+970
-409
lines changed

clients/client-s3/src/commands/AbortMultipartUploadCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,8 @@ export interface AbortMultipartUploadCommandOutput extends AbortMultipartUploadO
5454
* <p>
5555
* <b>Directory buckets</b> -
5656
* For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com/<i>key-name</i>
57-
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
58-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
57+
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
58+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
5959
* <i>Amazon S3 User Guide</i>.</p>
6060
* </li>
6161
* </ul>

clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts

+8-2
Original file line numberDiff line numberDiff line change
@@ -75,8 +75,8 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
7575
* <p>
7676
* <b>Directory buckets</b> -
7777
* For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com/<i>key-name</i>
78-
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
79-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
78+
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
79+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
8080
* <i>Amazon S3 User Guide</i>.</p>
8181
* </note>
8282
* <dl>
@@ -220,6 +220,7 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
220220
* ETag: "STRING_VALUE",
221221
* ChecksumCRC32: "STRING_VALUE",
222222
* ChecksumCRC32C: "STRING_VALUE",
223+
* ChecksumCRC64NVME: "STRING_VALUE",
223224
* ChecksumSHA1: "STRING_VALUE",
224225
* ChecksumSHA256: "STRING_VALUE",
225226
* PartNumber: Number("int"),
@@ -229,8 +230,11 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
229230
* UploadId: "STRING_VALUE", // required
230231
* ChecksumCRC32: "STRING_VALUE",
231232
* ChecksumCRC32C: "STRING_VALUE",
233+
* ChecksumCRC64NVME: "STRING_VALUE",
232234
* ChecksumSHA1: "STRING_VALUE",
233235
* ChecksumSHA256: "STRING_VALUE",
236+
* ChecksumType: "COMPOSITE" || "FULL_OBJECT",
237+
* MpuObjectSize: "STRING_VALUE",
234238
* RequestPayer: "requester",
235239
* ExpectedBucketOwner: "STRING_VALUE",
236240
* IfMatch: "STRING_VALUE",
@@ -249,8 +253,10 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
249253
* // ETag: "STRING_VALUE",
250254
* // ChecksumCRC32: "STRING_VALUE",
251255
* // ChecksumCRC32C: "STRING_VALUE",
256+
* // ChecksumCRC64NVME: "STRING_VALUE",
252257
* // ChecksumSHA1: "STRING_VALUE",
253258
* // ChecksumSHA256: "STRING_VALUE",
259+
* // ChecksumType: "COMPOSITE" || "FULL_OBJECT",
254260
* // ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
255261
* // VersionId: "STRING_VALUE",
256262
* // SSEKMSKeyId: "STRING_VALUE",

clients/client-s3/src/commands/CopyObjectCommand.ts

+5-3
Original file line numberDiff line numberDiff line change
@@ -55,8 +55,8 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
5555
* <p>
5656
* <b>Directory buckets </b> -
5757
* For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com/<i>key-name</i>
58-
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
59-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
58+
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
59+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
6060
* <i>Amazon S3 User Guide</i>.</p>
6161
* </li>
6262
* <li>
@@ -239,7 +239,7 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
239239
* ACL: "private" || "public-read" || "public-read-write" || "authenticated-read" || "aws-exec-read" || "bucket-owner-read" || "bucket-owner-full-control",
240240
* Bucket: "STRING_VALUE", // required
241241
* CacheControl: "STRING_VALUE",
242-
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256",
242+
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256" || "CRC64NVME",
243243
* ContentDisposition: "STRING_VALUE",
244244
* ContentEncoding: "STRING_VALUE",
245245
* ContentLanguage: "STRING_VALUE",
@@ -286,8 +286,10 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
286286
* // CopyObjectResult: { // CopyObjectResult
287287
* // ETag: "STRING_VALUE",
288288
* // LastModified: new Date("TIMESTAMP"),
289+
* // ChecksumType: "COMPOSITE" || "FULL_OBJECT",
289290
* // ChecksumCRC32: "STRING_VALUE",
290291
* // ChecksumCRC32C: "STRING_VALUE",
292+
* // ChecksumCRC64NVME: "STRING_VALUE",
291293
* // ChecksumSHA1: "STRING_VALUE",
292294
* // ChecksumSHA256: "STRING_VALUE",
293295
* // },

clients/client-s3/src/commands/CreateBucketCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -59,8 +59,8 @@ export interface CreateBucketCommandOutput extends CreateBucketOutput, __Metadat
5959
* <p>
6060
* <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Regional endpoint. These endpoints support path-style requests in the format <code>https://s3express-control.<i>region-code</i>.amazonaws.com/<i>bucket-name</i>
6161
* </code>. Virtual-hosted-style requests aren't supported.
62-
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
63-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
62+
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
63+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
6464
* <i>Amazon S3 User Guide</i>.</p>
6565
* </li>
6666
* </ul>

clients/client-s3/src/commands/CreateBucketMetadataTableConfigurationCommand.ts

+1-1
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@ export interface CreateBucketMetadataTableConfigurationCommandOutput extends __M
9999
* const input = { // CreateBucketMetadataTableConfigurationRequest
100100
* Bucket: "STRING_VALUE", // required
101101
* ContentMD5: "STRING_VALUE",
102-
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256",
102+
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256" || "CRC64NVME",
103103
* MetadataTableConfiguration: { // MetadataTableConfiguration
104104
* S3TablesDestination: { // S3TablesDestination
105105
* TableBucketArn: "STRING_VALUE", // required

clients/client-s3/src/commands/CreateMultipartUploadCommand.ts

+6-4
Original file line numberDiff line numberDiff line change
@@ -63,8 +63,8 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
6363
* <p>
6464
* <b>Directory buckets </b> -
6565
* For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com/<i>key-name</i>
66-
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
67-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
66+
* </code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
67+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
6868
* <i>Amazon S3 User Guide</i>.</p>
6969
* </li>
7070
* </ul>
@@ -340,7 +340,8 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
340340
* ObjectLockRetainUntilDate: new Date("TIMESTAMP"),
341341
* ObjectLockLegalHoldStatus: "ON" || "OFF",
342342
* ExpectedBucketOwner: "STRING_VALUE",
343-
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256",
343+
* ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256" || "CRC64NVME",
344+
* ChecksumType: "COMPOSITE" || "FULL_OBJECT",
344345
* };
345346
* const command = new CreateMultipartUploadCommand(input);
346347
* const response = await client.send(command);
@@ -357,7 +358,8 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
357358
* // SSEKMSEncryptionContext: "STRING_VALUE",
358359
* // BucketKeyEnabled: true || false,
359360
* // RequestCharged: "requester",
360-
* // ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256",
361+
* // ChecksumAlgorithm: "CRC32" || "CRC32C" || "SHA1" || "SHA256" || "CRC64NVME",
362+
* // ChecksumType: "COMPOSITE" || "FULL_OBJECT",
361363
* // };
362364
*
363365
* ```

clients/client-s3/src/commands/CreateSessionCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -61,8 +61,8 @@ export interface CreateSessionCommandOutput extends CreateSessionOutput, __Metad
6161
* <note>
6262
* <ul>
6363
* <li>
64-
* <p>You must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com</code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
65-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
64+
* <p>You must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket-name</i>.s3express-<i>zone-id</i>.<i>region-code</i>.amazonaws.com</code>. Path-style requests are not supported. For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
65+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
6666
* <i>Amazon S3 User Guide</i>.</p>
6767
* </li>
6868
* <li>

clients/client-s3/src/commands/DeleteBucketCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -42,8 +42,8 @@ export interface DeleteBucketCommandOutput extends __MetadataBearer {}
4242
* <p>
4343
* <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Regional endpoint. These endpoints support path-style requests in the format <code>https://s3express-control.<i>region-code</i>.amazonaws.com/<i>bucket-name</i>
4444
* </code>. Virtual-hosted-style requests aren't supported.
45-
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
46-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
45+
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
46+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
4747
* <i>Amazon S3 User Guide</i>.</p>
4848
* </li>
4949
* </ul>

clients/client-s3/src/commands/DeleteBucketLifecycleCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -67,8 +67,8 @@ export interface DeleteBucketLifecycleCommandOutput extends __MetadataBearer {}
6767
* <p>
6868
* <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Regional endpoint. These endpoints support path-style requests in the format <code>https://s3express-control.<i>region-code</i>.amazonaws.com/<i>bucket-name</i>
6969
* </code>. Virtual-hosted-style requests aren't supported.
70-
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
71-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
70+
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
71+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
7272
* <i>Amazon S3 User Guide</i>.</p>
7373
* </note>
7474
* </li>

clients/client-s3/src/commands/DeleteBucketPolicyCommand.ts

+2-2
Original file line numberDiff line numberDiff line change
@@ -33,8 +33,8 @@ export interface DeleteBucketPolicyCommandOutput extends __MetadataBearer {}
3333
* <p>
3434
* <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Regional endpoint. These endpoints support path-style requests in the format <code>https://s3express-control.<i>region-code</i>.amazonaws.com/<i>bucket-name</i>
3535
* </code>. Virtual-hosted-style requests aren't supported.
36-
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/endpoint-directory-buckets-AZ.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
37-
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Concepts for directory buckets in Local Zones</a> in the
36+
* For more information about endpoints in Availability Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html">Regional and Zonal endpoints for directory buckets in Availability Zones</a> in the
37+
* <i>Amazon S3 User Guide</i>. For more information about endpoints in Local Zones, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.html">Available Local Zone for directory buckets</a> in the
3838
* <i>Amazon S3 User Guide</i>.</p>
3939
* </note>
4040
* <dl>

0 commit comments

Comments
 (0)