From f92113824caff54dcfb5ba9641a264abb5320144 Mon Sep 17 00:00:00 2001 From: Felipe Nakandakari <76239+fenak@users.noreply.github.com> Date: Fri, 11 Aug 2023 10:52:07 +1000 Subject: [PATCH 1/3] Add X-Amz-Server-Side-Encryption-Context header to required signed headers allowlist --- aws/signer/v4/v4.go | 1 + 1 file changed, 1 insertion(+) diff --git a/aws/signer/v4/v4.go b/aws/signer/v4/v4.go index 41386bab12a..b2097937440 100644 --- a/aws/signer/v4/v4.go +++ b/aws/signer/v4/v4.go @@ -135,6 +135,7 @@ var requiredSignedHeaders = rules{ "X-Amz-Request-Payer": struct{}{}, "X-Amz-Server-Side-Encryption": struct{}{}, "X-Amz-Server-Side-Encryption-Aws-Kms-Key-Id": struct{}{}, + "X-Amz-Server-Side-Encryption-Context": struct{}{}, "X-Amz-Server-Side-Encryption-Customer-Algorithm": struct{}{}, "X-Amz-Server-Side-Encryption-Customer-Key": struct{}{}, "X-Amz-Server-Side-Encryption-Customer-Key-Md5": struct{}{}, From 2b5f74c8f9cbafc8e3e1c4449fce08d3204eeef9 Mon Sep 17 00:00:00 2001 From: Luc Talatinian Date: Thu, 17 Aug 2023 11:32:44 -0400 Subject: [PATCH 2/3] add changelog --- CHANGELOG_PENDING.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md index 8a1927a39ca..e58d666f26f 100644 --- a/CHANGELOG_PENDING.md +++ b/CHANGELOG_PENDING.md @@ -3,3 +3,5 @@ ### SDK Enhancements ### SDK Bugs +* `aws/signer/v4`: `Sign X-Amz-Server-Side-Encryption-Context` header. + * Fixes signing for PutObject requests that set `SSEKMSEncryptionContext`. From d7de4bbd5e1234152c30200f03f08a36bdeb95d3 Mon Sep 17 00:00:00 2001 From: Luc Talatinian Date: Thu, 17 Aug 2023 11:51:59 -0400 Subject: [PATCH 3/3] fix md in changelog --- CHANGELOG_PENDING.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md index e58d666f26f..9aadd49af85 100644 --- a/CHANGELOG_PENDING.md +++ b/CHANGELOG_PENDING.md @@ -3,5 +3,5 @@ ### SDK Enhancements ### SDK Bugs -* `aws/signer/v4`: `Sign X-Amz-Server-Side-Encryption-Context` header. +* `aws/signer/v4`: Sign `X-Amz-Server-Side-Encryption-Context` header. * Fixes signing for PutObject requests that set `SSEKMSEncryptionContext`.