Skip to content

Commit e41ba91

Browse files
author
awstools
committed
feat(client-s3): Allow FIPS to be used with path-style URLs.
1 parent 480a1fe commit e41ba91

File tree

81 files changed

+7237
-5642
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

81 files changed

+7237
-5642
lines changed

clients/client-s3/src/S3.ts

Lines changed: 41 additions & 356 deletions
Large diffs are not rendered by default.

clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -56,8 +56,6 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
5656
* Upload</a>.</p>
5757
* <p>For information about permissions required to use the multipart upload API, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart Upload and
5858
* Permissions</a>.</p>
59-
*
60-
*
6159
* <p>
6260
* <code>CompleteMultipartUpload</code> has the following special errors:</p>
6361
* <ul>
@@ -116,7 +114,6 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
116114
* </ul>
117115
* </li>
118116
* </ul>
119-
*
120117
* <p>The following operations are related to <code>CompleteMultipartUpload</code>:</p>
121118
* <ul>
122119
* <li>

clients/client-s3/src/commands/CopyObjectCommand.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,6 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
121121
* false</p>
122122
* </li>
123123
* </ul>
124-
*
125124
* <p>If both the <code>x-amz-copy-source-if-none-match</code> and
126125
* <code>x-amz-copy-source-if-modified-since</code> headers are present in the request and
127126
* evaluate as follows, Amazon S3 returns the <code>412 Precondition Failed</code> response
@@ -137,7 +136,6 @@ export interface CopyObjectCommandOutput extends CopyObjectOutput, __MetadataBea
137136
* true</p>
138137
* </li>
139138
* </ul>
140-
*
141139
* <note>
142140
* <p>All headers with the <code>x-amz-</code> prefix, including
143141
* <code>x-amz-copy-source</code>, must be signed.</p>

clients/client-s3/src/commands/CreateBucketCommand.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,6 @@ export interface CreateBucketCommandOutput extends CreateBucketOutput, __Metadat
136136
* <p>You can use either a canned ACL or specify access permissions explicitly. You cannot
137137
* do both.</p>
138138
* </note>
139-
*
140139
* <p>
141140
* <b>Permissions</b>
142141
* </p>

clients/client-s3/src/commands/CreateMultipartUploadCommand.ts

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -35,32 +35,26 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
3535
* upload ID in each of your subsequent upload part requests (see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html">UploadPart</a>). You also include this
3636
* upload ID in the final request to either complete or abort the multipart upload
3737
* request.</p>
38-
*
3938
* <p>For more information about multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html">Multipart Upload Overview</a>.</p>
40-
*
4139
* <p>If you have configured a lifecycle rule to abort incomplete multipart uploads, the
4240
* upload must complete within the number of days specified in the bucket lifecycle
4341
* configuration. Otherwise, the incomplete multipart upload becomes eligible for an abort
4442
* action and Amazon S3 aborts the multipart upload. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config">Aborting
4543
* Incomplete Multipart Uploads Using a Bucket Lifecycle Policy</a>.</p>
46-
*
4744
* <p>For information about the permissions required to use the multipart upload API, see
4845
* <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart Upload and
4946
* Permissions</a>.</p>
50-
*
5147
* <p>For request signing, multipart upload is just a series of regular requests. You initiate
5248
* a multipart upload, send one or more requests to upload parts, and then complete the
5349
* multipart upload process. You sign each request individually. There is nothing special
5450
* about signing multipart upload requests. For more information about signing, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html">Authenticating
5551
* Requests (Amazon Web Services Signature Version 4)</a>.</p>
56-
*
5752
* <note>
5853
* <p> After you initiate a multipart upload and upload one or more parts, to stop being
5954
* charged for storing the uploaded parts, you must either complete or abort the multipart
6055
* upload. Amazon S3 frees up the space used to store the parts and stop charging you for
6156
* storing them only after you either complete or abort a multipart upload. </p>
6257
* </note>
63-
*
6458
* <p>You can optionally request server-side encryption. For server-side encryption, Amazon S3
6559
* encrypts your data as it writes it to disks in its data centers and decrypts it when you
6660
* access it. You can provide your own encryption key, or use Amazon Web Services KMS keys or Amazon S3-managed encryption keys. If you choose to provide
@@ -72,16 +66,12 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
7266
* from the encrypted file parts before it completes the multipart upload. For more
7367
* information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API
7468
* and permissions</a> in the <i>Amazon S3 User Guide</i>.</p>
75-
*
7669
* <p>If your Identity and Access Management (IAM) user or role is in the same Amazon Web Services account
7770
* as the KMS key, then you must have these permissions on the key policy. If your IAM
7871
* user or role belongs to a different account than the key, then you must have the
7972
* permissions on both the key policy and your IAM user or role.</p>
80-
*
81-
*
8273
* <p> For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html">Protecting
8374
* Data Using Server-Side Encryption</a>.</p>
84-
*
8575
* <dl>
8676
* <dt>Access Permissions</dt>
8777
* <dd>
@@ -278,10 +268,8 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
278268
* </p>
279269
* </li>
280270
* </ul>
281-
*
282271
* </dd>
283272
* </dl>
284-
*
285273
* <p>The following operations are related to <code>CreateMultipartUpload</code>:</p>
286274
* <ul>
287275
* <li>

clients/client-s3/src/commands/DeleteBucketAnalyticsConfigurationCommand.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,10 +34,8 @@ export interface DeleteBucketAnalyticsConfigurationCommandOutput extends __Metad
3434
* by default. The bucket owner can grant this permission to others. For more information
3535
* about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your Amazon S3
3636
* Resources</a>.</p>
37-
*
3837
* <p>For information about the Amazon S3 analytics feature, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/analytics-storage-class.html">Amazon S3 Analytics – Storage Class
3938
* Analysis</a>. </p>
40-
*
4139
* <p>The following operations are related to
4240
* <code>DeleteBucketAnalyticsConfiguration</code>:</p>
4341
* <ul>

clients/client-s3/src/commands/DeleteBucketCommand.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,6 @@ export interface DeleteBucketCommandOutput extends __MetadataBearer {}
2626
/**
2727
* <p>Deletes the S3 bucket. All objects (including all object versions and delete markers) in
2828
* the bucket must be deleted before the bucket itself can be deleted.</p>
29-
*
3029
* <p class="title">
3130
* <b>Related Resources</b>
3231
* </p>

clients/client-s3/src/commands/DeleteBucketCorsCommand.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,6 @@ export interface DeleteBucketCorsCommandOutput extends __MetadataBearer {}
3030
* and can grant this permission to others. </p>
3131
* <p>For information about <code>cors</code>, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html">Enabling
3232
* Cross-Origin Resource Sharing</a> in the <i>Amazon S3 User Guide</i>.</p>
33-
*
3433
* <p class="title">
3534
* <b>Related Resources:</b>
3635
* </p>

clients/client-s3/src/commands/DeleteBucketEncryptionCommand.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,6 @@ export interface DeleteBucketEncryptionCommandOutput extends __MetadataBearer {}
3232
* by default. The bucket owner can grant this permission to others. For more information
3333
* about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to your Amazon S3
3434
* Resources</a> in the <i>Amazon S3 User Guide</i>.</p>
35-
*
3635
* <p class="title">
3736
* <b>Related Resources</b>
3837
* </p>

clients/client-s3/src/commands/DeleteBucketLifecycleCommand.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,10 +31,8 @@ export interface DeleteBucketLifecycleCommandOutput extends __MetadataBearer {}
3131
* <p>To use this operation, you must have permission to perform the
3232
* <code>s3:PutLifecycleConfiguration</code> action. By default, the bucket owner has this
3333
* permission and the bucket owner can grant this permission to others.</p>
34-
*
3534
* <p>There is usually some time lag before lifecycle configuration deletion is fully
3635
* propagated to all the Amazon S3 systems.</p>
37-
*
3836
* <p>For more information about the object expiration, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/intro-lifecycle-rules.html#intro-lifecycle-rules-actions">Elements to
3937
* Describe Lifecycle Actions</a>.</p>
4038
* <p>Related actions include:</p>

clients/client-s3/src/commands/DeleteBucketMetricsConfigurationCommand.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,13 +30,11 @@ export interface DeleteBucketMetricsConfigurationCommandOutput extends __Metadat
3030
* <p>Deletes a metrics configuration for the Amazon CloudWatch request metrics (specified by the
3131
* metrics configuration ID) from the bucket. Note that this doesn't include the daily storage
3232
* metrics.</p>
33-
*
3433
* <p> To use this operation, you must have permissions to perform the
3534
* <code>s3:PutMetricsConfiguration</code> action. The bucket owner has this permission by
3635
* default. The bucket owner can grant this permission to others. For more information about
3736
* permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your Amazon S3
3837
* Resources</a>.</p>
39-
*
4038
* <p>For information about CloudWatch request metrics for Amazon S3, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/cloudwatch-monitoring.html">Monitoring Metrics with Amazon CloudWatch</a>. </p>
4139
* <p>The following operations are related to
4240
* <code>DeleteBucketMetricsConfiguration</code>:</p>

clients/client-s3/src/commands/DeleteBucketPolicyCommand.ts

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,18 +29,15 @@ export interface DeleteBucketPolicyCommandOutput extends __MetadataBearer {}
2929
* Amazon Web Services account that owns the bucket, the calling identity must have the
3030
* <code>DeleteBucketPolicy</code> permissions on the specified bucket and belong to the
3131
* bucket owner's account to use this operation. </p>
32-
*
3332
* <p>If you don't have <code>DeleteBucketPolicy</code> permissions, Amazon S3 returns a <code>403
3433
* Access Denied</code> error. If you have the correct permissions, but you're not using an
3534
* identity that belongs to the bucket owner's account, Amazon S3 returns a <code>405 Method Not
3635
* Allowed</code> error. </p>
37-
*
3836
* <important>
3937
* <p>As a security precaution, the root user of the Amazon Web Services account that owns a bucket can
4038
* always use this operation, even if the policy explicitly denies the root user the
4139
* ability to perform this action.</p>
4240
* </important>
43-
*
4441
* <p>For more information about bucket policies, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/using-iam-policies.html">Using Bucket Policies and
4542
* UserPolicies</a>. </p>
4643
* <p>The following operations are related to <code>DeleteBucketPolicy</code>

clients/client-s3/src/commands/DeleteBucketReplicationCommand.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,9 +34,7 @@ export interface DeleteBucketReplicationCommandOutput extends __MetadataBearer {
3434
* <p>It can take a while for the deletion of a replication configuration to fully
3535
* propagate.</p>
3636
* </note>
37-
*
3837
* <p> For information about replication configuration, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/replication.html">Replication</a> in the <i>Amazon S3 User Guide</i>.</p>
39-
*
4038
* <p>The following operations are related to <code>DeleteBucketReplication</code>:</p>
4139
* <ul>
4240
* <li>

clients/client-s3/src/commands/DeleteBucketTaggingCommand.ts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,6 @@ export interface DeleteBucketTaggingCommandOutput extends __MetadataBearer {}
2525

2626
/**
2727
* <p>Deletes the tags from the bucket.</p>
28-
*
2928
* <p>To use this operation, you must have permission to perform the
3029
* <code>s3:PutBucketTagging</code> action. By default, the bucket owner has this
3130
* permission and can grant this permission to others. </p>

clients/client-s3/src/commands/DeleteBucketWebsiteCommand.ts

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,15 +29,12 @@ export interface DeleteBucketWebsiteCommandOutput extends __MetadataBearer {}
2929
* bucket. You will get a <code>200 OK</code> response if the website configuration you are
3030
* trying to delete does not exist on the bucket. Amazon S3 returns a <code>404</code> response if
3131
* the bucket specified in the request does not exist.</p>
32-
*
3332
* <p>This DELETE action requires the <code>S3:DeleteBucketWebsite</code> permission. By
3433
* default, only the bucket owner can delete the website configuration attached to a bucket.
3534
* However, bucket owners can grant other users permission to delete the website configuration
3635
* by writing a bucket policy granting them the <code>S3:DeleteBucketWebsite</code>
3736
* permission. </p>
38-
*
3937
* <p>For more information about hosting websites, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html">Hosting Websites on Amazon S3</a>. </p>
40-
*
4138
* <p>The following operations are related to <code>DeleteBucketWebsite</code>:</p>
4239
* <ul>
4340
* <li>

clients/client-s3/src/commands/DeleteObjectCommand.ts

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -32,26 +32,21 @@ export interface DeleteObjectCommandOutput extends DeleteObjectOutput, __Metadat
3232
* <p>Removes the null version (if there is one) of an object and inserts a delete marker,
3333
* which becomes the latest version of the object. If there isn't a null version, Amazon S3 does
3434
* not remove any objects but will still respond that the command was successful.</p>
35-
*
3635
* <p>To remove a specific version, you must be the bucket owner and you must use the version
3736
* Id subresource. Using this subresource permanently deletes the version. If the object
3837
* deleted is a delete marker, Amazon S3 sets the response header,
3938
* <code>x-amz-delete-marker</code>, to true. </p>
40-
*
4139
* <p>If the object you want to delete is in a bucket where the bucket versioning
4240
* configuration is MFA Delete enabled, you must include the <code>x-amz-mfa</code> request
4341
* header in the DELETE <code>versionId</code> request. Requests that include
4442
* <code>x-amz-mfa</code> must use HTTPS. </p>
45-
*
4643
* <p> For more information about MFA Delete, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingMFADelete.html">Using MFA Delete</a>. To see sample requests that use versioning, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectDELETE.html#ExampleVersionObjectDelete">Sample Request</a>. </p>
47-
*
4844
* <p>You can delete objects by explicitly calling DELETE Object or configure its
4945
* lifecycle (<a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycle.html">PutBucketLifecycle</a>) to
5046
* enable Amazon S3 to remove them for you. If you want to block users or accounts from removing or
5147
* deleting objects from your bucket, you must deny them the <code>s3:DeleteObject</code>,
5248
* <code>s3:DeleteObjectVersion</code>, and <code>s3:PutLifeCycleConfiguration</code>
5349
* actions. </p>
54-
*
5550
* <p>The following action is related to <code>DeleteObject</code>:</p>
5651
* <ul>
5752
* <li>

clients/client-s3/src/commands/DeleteObjectTaggingCommand.ts

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,14 +32,11 @@ export interface DeleteObjectTaggingCommandOutput extends DeleteObjectTaggingOut
3232
* <p>Removes the entire tag set from the specified object. For more information about
3333
* managing object tags, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-tagging.html"> Object
3434
* Tagging</a>.</p>
35-
*
3635
* <p>To use this operation, you must have permission to perform the
3736
* <code>s3:DeleteObjectTagging</code> action.</p>
38-
*
3937
* <p>To delete tags of a specific object version, add the <code>versionId</code> query
4038
* parameter in the request. You will need permission for the
4139
* <code>s3:DeleteObjectVersionTagging</code> action.</p>
42-
*
4340
* <p>The following operations are related to
4441
* <code>DeleteBucketMetricsConfiguration</code>:</p>
4542
* <ul>

clients/client-s3/src/commands/DeleteObjectsCommand.ts

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -34,31 +34,26 @@ export interface DeleteObjectsCommandOutput extends DeleteObjectsOutput, __Metad
3434
* request. If you know the object keys that you want to delete, then this action provides
3535
* a suitable alternative to sending individual delete requests, reducing per-request
3636
* overhead.</p>
37-
*
3837
* <p>The request contains a list of up to 1000 keys that you want to delete. In the XML, you
3938
* provide the object key names, and optionally, version IDs if you want to delete a specific
4039
* version of the object from a versioning-enabled bucket. For each key, Amazon S3 performs a
4140
* delete action and returns the result of that delete, success, or failure, in the
4241
* response. Note that if the object specified in the request is not found, Amazon S3 returns the
4342
* result as deleted.</p>
44-
*
4543
* <p> The action supports two modes for the response: verbose and quiet. By default, the
4644
* action uses verbose mode in which the response includes the result of deletion of each
4745
* key in your request. In quiet mode the response includes only keys where the delete
4846
* action encountered an error. For a successful deletion, the action does not return
4947
* any information about the delete in the response body.</p>
50-
*
5148
* <p>When performing this action on an MFA Delete enabled bucket, that attempts to delete
5249
* any versioned objects, you must include an MFA token. If you do not provide one, the entire
5350
* request will fail, even if there are non-versioned objects you are trying to delete. If you
5451
* provide an invalid token, whether there are versioned keys in the request or not, the
5552
* entire Multi-Object Delete request will fail. For information about MFA Delete, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html#MultiFactorAuthenticationDelete"> MFA
5653
* Delete</a>.</p>
57-
*
5854
* <p>Finally, the Content-MD5 header is required for all Multi-Object Delete requests. Amazon
5955
* S3 uses the header value to ensure that your request body has not been altered in
6056
* transit.</p>
61-
*
6257
* <p>The following operations are related to <code>DeleteObjects</code>:</p>
6358
* <ul>
6459
* <li>

0 commit comments

Comments
 (0)