

Amazon S3 Connector Reference

The following operations allow you to work with the Amazon S3 Connector. Click an operation name to see parameter details and samples on how to use it.

---

Initialize the connector

To use the Amazon S3 connector, add the element in your configuration before carrying out any Amazon S3 operations. This Amazon S3 configuration authenticates with Amazon S3 by specifying the AWS access key ID and secret access key ID, which are used for every operation.

init

The init operation is used to initialize the connection to Amazon S3.

Parameter Name	Description	Required
awsAccessKeyId	AWS access key ID.	Optional
awsSecretAccessKey	AWS secret access key.	Optional
name	Unique name to identify the connection by.	Yes
region	Region which is used select a regional endpoint to make requests, e.g.: us-east-1.	Yes
host	The AWS API endpoint hostname to which you need to connect.	Optional

Note: You can either pass credentials within init configuration or set the AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as environment variables. The AWS SDK uses provider chains to look for AWS credentials in system/user environment variables.

To set these environment variables on Linux, macOS, or Unix, use export : export AWS_ACCESS_KEY_ID=AKIXXXXXXXXXXA export AWS_SECRET_ACCESS_KEY=qHZXXXXXXQc4oMQMnAOj+340XXxO2s

To set these environment variables on Windows, use set : set AWS_ACCESS_KEY_ID=AKIXXXXXXXXXXA set AWS_SECRET_ACCESS_KEY=qHZXXXXXXQc4oMQMnAOj+340XXxO2s

Note: If the application is running in an EC2 instance and credentials are not defined in the init configuration, the credentials will be obtained from the IAM role assigned for the Amazon EC2 instance. This option is available only with Amazon S3 connector v2.0.2 and above.

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

---

Buckets

listBuckets

The listBuckets implementation returns a list of all buckets owned by the authenticated sender of the request. To authenticate a request, use a valid AWS Access Key ID that is registered with Amazon S3. Anonymous requests cannot list buckets, and a user cannot list buckets that were not created by that particular user.

Sample configuration

<amazons3.listBuckets/>

Sample request

<listBuckets/>

createBucket

The createBucket operation creates a new bucket. To create a bucket, the user should be registered with Amazon S3 and have a valid AWS Access Key ID to authenticate requests. Anonymous requests are never allowed to create buckets. By creating the bucket, the user becomes the owner of the bucket. Not every string is an acceptable bucket name. For information on bucket naming restrictions, see Working with Amazon S3 Buckets. By default, the bucket is created in the US Standard region. The user can optionally specify a region in the request body. For example, if the user resides in Europe, the user will probably find it advantageous to create buckets in the EU (Ireland) region. For more information, see How to Select a Region for Your Buckets. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
bucketRegion	Region for the created bucket.	Yes
acl	The canned ACL to apply to the object.	Optional
grantRead	Allows the specified grantee or grantees to list the objects in the bucket.	Optional
grantWrite	Allows the specified grantee or grantees to create, overwrite, and delete any object in the bucket.	Optional
grantReadACP	Allows the specified grantee or grantees to read the bucket ACL.	Optional
grantWriteACP	Allows the specified grantee or grantees to write the ACL for the applicable bucket.	Optional
grantFullControl	Allows the specified grantee or grantees the READ, WRITE, READ_ACP, and WRITE_ACP permissions on the bucket.	Optional
objectLockEnabledForBucket	The object lock mode that you want to apply to the copied object.	Optional

Sample configuration

<amazons3.createBucket>
    <bucketName>{$ctx:bucketName}</bucketName>
    <bucketRegion>{$ctx:bucketRegion}</bucketRegion>
    <acl>{$ctx:acl}</acl>
    <grantFullControl>{$ctx:grantFullControl}</grantFullControl>
    <grantRead>{$ctx:grantRead}</grantRead>
    <grantReadACP>{$ctx:grantReadACP}</grantReadACP>
    <grantWrite>{$ctx:grantWrite}</grantWrite>
    <grantWriteACP>{$ctx:grantWriteACP}</grantWriteACP>
    <objectLockEnabledForBucket>{$ctx:objectLockEnabledForBucket}</objectLockEnabledForBucket>
</amazons3.createBucket>

Sample request

<createBucket>
    <bucketName>signv4test</bucketName>
    <bucketRegion>us-east-2</bucketRegion>
    <objectLockEnabledForBucket>false</objectLockEnabledForBucket>
</createBucket>

putBucketWebsite

Sets the configuration of the website that is specified in the website subresource.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
websiteConfig	Website configuration information. For information on the elements you use in the request to specify the website configuration, see here.	Yes

Sample configuration

<amazons3.putBucketWebsite>
    <bucketName>{$ctx:bucketName}</bucketName>
    <websiteConfig>{$ctx:websiteConfig}</websiteConfig>
</amazons3.putBucketWebsite>

Sample request

<putBucketWebsite>
    <bucketName>signv4test</bucketName>
    <WebsiteConfiguration>
        <IndexDocument>
            <Suffix>index2.html</Suffix>
        </IndexDocument>
        <ErrorDocument>
            <Key>Error2.html</Key>
        </ErrorDocument>
        <RoutingRules>
            <RoutingRule>
                <Condition>
                    <KeyPrefixEquals>docs/</KeyPrefixEquals>
                </Condition>
                <Redirect>
                    <ReplaceKeyPrefixWith>documents/</ReplaceKeyPrefixWith>
                </Redirect>
            </RoutingRule>
            <RoutingRule>
                <Condition>
                    <KeyPrefixEquals>images/</KeyPrefixEquals>
                </Condition>
                <Redirect>
                    <ReplaceKeyPrefixWith>documents/</ReplaceKeyPrefixWith>
                </Redirect>
            </RoutingRule>
        </RoutingRules>
    </WebsiteConfiguration>
</putBucketWebsite>

putBucketPolicy

The putBucketPolicy operation adds or replaces a policy on a bucket. If the bucket already has a policy, the one in this request completely replaces it. To perform this operation, you must be the bucket owner.

If you are not the bucket owner but have PutBucketPolicy permissions on the bucket, Amazon S3 returns a 405 Method Not Allowed. In all other cases, for a PUT bucket policy request that is not from the bucket owner, Amazon S3 returns 403 Access Denied. There are restrictions about who can create bucket policies and which objects in a bucket they can apply to.

See the [https://sdk.amazonaws.com/java/api/latest/software/amazon/awssdk/services/s3/model/PutBucketPolicyRequest.html) for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
bucketPolicy	Policy of the bucket.	Yes
confirmRemoveSelfBucketAccess	Use this to change this bucket policy in the future.	Optional

Sample configuration

<amazons3.putBucketPolicy>
    <bucketName>{$ctx:bucketName}</bucketName>
    <bucketPolicy>{$ctx:bucketPolicy}</bucketPolicy>
    <confirmRemoveSelfBucketAccess>{$ctx:confirmRemoveSelfBucketAccess}</confirmRemoveSelfBucketAccess>
</amazons3.putBucketPolicy>

Sample request

{
    "awsAccessKeyId": "AKXXXXXXXXX5EAS",
    "awsSecretAccessKey": "qHXXXXXXNMDYadDdsQMnAOj+3XXXXPs",
    "region":"us-east-2",
    "connectionName": "amazonS3",
    "bucketName": "signv4test",
    "bucketPolicy": {
                "Version":"2012-10-17",
                "Statement":[{
                    "Sid":"AddPerm",
                    "Effect":"Allow",
                    "Principal": {
                            "AWS": ["*"]
                        },
                    "Action":["s3:*"],
                    "Resource":["arn:aws:s3:::signv4test/*"]
                    }]
                },
    "confirmRemoveSelfBucketAccess":""
}

putBucketACL

The putBucketACL operation uses the ACL sub-resource to set the permissions on an existing bucket using access control lists (ACL). See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
accessControlList	Container for ACL information, which includes the following: Grant: Container for the grantee and permissions. Grantee: The subject whose permissions are being set. ID: ID of the grantee. DisplayName: Screen name of the grantee. Permission: Specifies the permission to give to the grantee.	Yes

Sample configuration

<amazons3.putBucketACL>
    <bucketName>{$ctx:bucketName}</bucketName>
    <accessControlList>{$ctx:accessControlList}</accessControlList>
</amazons3.putBucketACL>

Sample request

<putBucketACL>
    <bucketName>signv4test</bucketName>
    <accessControlList>
        <Grants>
            <Grant>
                <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
                    <ID>9a48e6b16816cc75df306d35bb5d0bd0778b61fbf49b8ef4892143197c84a867</ID>
                    <DisplayName>admin+aws+connectors+secondary</DisplayName>
                </Grantee>
                <Permission>FULL_CONTROL</Permission>
            </Grant>
            <Grant>
                <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="Group">
                    <URI xmlns="">http://acs.amazonaws.com/groups/global/AllUsers</URI>
                </Grantee>
                <Permission xmlns="">READ</Permission>
            </Grant>
        </Grants>
    </accessControlList>
</putBucketACL>

putBucketLifecycleConfiguration

The putBucketLifecycleConfiguration operation uses the acl subresource to set the permissions on an existing bucket using access control lists (ACL). See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
lifecycleConfiguration	Container for lifecycle rules, which includes the following: Rule: Container for a lifecycle rule. ID: Unique identifier for the rule. The value cannot be longer than 255 characters. Prefix: Object key prefix identifying one or more objects to which the rule applies. Status: If Enabled, Amazon S3 executes the rule as scheduled. If Disabled, Amazon S3 ignores the rule. Transition: This action specifies a period in the objects' lifetime when Amazon S3 should transition them to the STANDARD_IA or the GLACIER storage class. Days: Specifies the number of days after object creation when the specific rule action takes effect. StorageClass: Specifies the Amazon S3 storage class to which you want the object to transition. Expiration: This action specifies a period in an object's lifetime when Amazon S3 should take the appropriate expiration action. Days: Specifies the number of days after object creation when the specific rule action takes effect.	Yes

Sample configuration

<amazons3.putBucketLifecycleConfiguration>
    <bucketName>{$ctx:bucketName}</bucketName>
    <lifecycleConfiguration>{$ctx:lifecycleConfiguration}</lifecycleConfiguration>
</amazons3.putBucketLifecycleConfiguration>

Sample request

<putBucketLifecycleConfiguration>
    <bucketName>signv4test</bucketName>
    <lifecycleConfiguration>
        <Rule>
            <ID>id1</ID>
            <Prefix>documents/</Prefix>
            <Status>Enabled</Status>
            <Transition>
                <Days>30</Days>
                <StorageClass>GLACIER</StorageClass>
            </Transition>
        </Rule>
        <Rule>
            <ID>id2</ID>
            <Prefix>logs/</Prefix>
            <Status>Enabled</Status>
            <Expiration>
                <Days>365</Days>
            </Expiration>
        </Rule>
    </lifecycleConfiguration>
</putBucketLifecycleConfiguration>

putBucketReplication

The putBucketReplication operation uses the acl subresource to set the permissions on an existing bucket using access control lists (ACL). See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
replicationConfiguration	Container for replication configuration (Amazon Resource Name (ARN) of an IAM role and set of replication rules): Rule: Container for information about a particular replication rule. ID: Unique identifier for the rule. The value cannot be longer than 255 characters. Prefix: Object key prefix identifying one or more objects to which the rule applies. Status: The rule is ignored if status is not Enabled.. Destination: Container for destination information. Bucket:Amazon resource name (ARN) of the bucket where you want Amazon S3 to store replicas of the object identified by the rule. Role: Amazon Resource Name (ARN) of an IAM role for Amazon S3 to assume when replicating the objects.	Yes

Sample configuration

<amazons3.putBucketReplication>
    <bucketName>signv4test</bucketName>
    <bucketName>{$ctx:bucketName}</bucketName>
    <replicationConfiguration>{$ctx:replicationConfiguration}</replicationConfiguration>
</amazons3.putBucketReplication>

Sample request

<putBucketReplication>
    <bucketName>signv4test</bucketName>
    <ReplicationConfiguration>
        <Rule>
            <ID>id1</ID>
            <Prefix>documents/</Prefix>
            <Status>Enabled</Status>
            <Destination>
                <Bucket>arn:aws:s3:::signv4testq23aa1</Bucket>
            </Destination>
        </Rule>
    </ReplicationConfiguration>
</putBucketReplication>

putBucketTagging

The putBucketTagging operation uses the tagging subresource to add a set of tags to an existing bucket. Use tags to organize your AWS bill to reflect your own cost structure. To do this, sign up to get your AWS account bill with tag key values included. Then, to see the cost of combined resources, organize your billing information according to resources with the same tag key values. For example, you can tag several resources with a specific application name, and then organize your billing information to see the total cost of that application across several services. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
tagSet	Container for a set of tags, which includes the following: Tag: Container for tag information. Key: Name of the tag. Value: Value of the tag.	Yes

Sample configuration

<amazons3.putBucketTagging>
    <bucketName>{$ctx:bucketName}</bucketName>
    <tagSet>{$ctx:tagSet}</tagSet>
</amazons3.putBucketTagging>

Sample request

<putBucketTagging>
    <bucketName>signv4test</bucketName>
    <TagSet>
        <Tag>
            <Key>Project</Key>
            <Value>Project One</Value>
        </Tag>
        <Tag>
            <Key>User</Key>
            <Value>jsmith</Value>
        </Tag>
    </TagSet>
</putBucketTagging>

putBucketRequestPayment

The putBucketRequestPayment operation uses the requestPayment subresource to set the request payment configuration of a bucket. By default, the bucket owner pays for downloads from the bucket. This configuration parameter enables the bucket owner (only) to specify that the person requesting the download will be charged for the download. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
payer	Specifies who pays for the download and request fees.	Yes

Sample configuration

<amazons3.putBucketRequestPayment>
    <bucketName>{$ctx:bucketName}</bucketName>
    <payer>{$ctx:payer}</payer>
</amazons3.putBucketRequestPayment>

Sample request

<putBucketRequestPayment>
    <bucketName>signv4test</bucketName>
    <payer>Requester</payer>
</putBucketRequestPayment>

putBucketVersioning

The putBucketVersioning operation uses the requestPayment subresource to set the request payment configuration of a bucket. By default, the bucket owner pays for downloads from the bucket. This configuration parameter enables the bucket owner (only) to specify that the person requesting the download will be charged for the download. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
status	Sets the versioning state of the bucket.	Optional
mfa	The concatenation of the authentication device's serial number, a space, and the value that is displayed on your authentication device.	Optional
mfaDelete	Specifies whether MFA Delete is enabled in the bucket versioning configuration.	Optional

Sample configuration

<amazons3.putBucketVersioning>
    <bucketName>{$ctx:bucketName}</bucketName>
    <status>{$ctx:status}</status>
    <mfaDelete>{$ctx:mfaDelete}</mfaDelete>
</amazons3.putBucketVersioning>

Sample request

<putBucketVersioning>
    <bucketName>signv4test</bucketName>
    <status>Enabled</status>
</putBucketVersioning>

deleteBucket

The deleteBucket operation deletes the bucket named in the URI. All objects (including all object versions and Delete Markers) in the bucket must be deleted before the bucket itself can be deleted. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucket>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucket>

Sample request

<deleteBucket>
    <bucketName>signv4test</bucketName>
</deleteBucket>

deleteBucketPolicy

The deleteBucketPolicy operation deletes the policy on a specified bucket. To use the operation, you must have DeletePolicy permissions on the specified bucket and be the bucket owner. If there are no DeletePolicy permissions, Amazon S3 returns a 403 Access Denied error. If there is the correct permission, but you are not the bucket owner, Amazon S3 returns a 405 Method Not Allowed error. If the bucket does not have a policy, Amazon S3 returns a 204 No Content error. There are restrictions about who can create bucket policies and which objects in a bucket they can apply to. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketPolicy>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketPolicy>

Sample request

<deleteBucketPolicy>
    <bucketName>signv4test</bucketName>
</deleteBucketPolicy>

deleteBucketCORS

The deleteBucketCORS operation deletes the CORS configuration information set for the bucket. To use this operation, you must have permission to perform the s3:PutCORSConfiguration action. The bucket owner has this permission by default and can grant this permission to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketCORS>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketCORS>

Sample request

<deleteBucketCORS>
    <bucketName>signv4test</bucketName>
</deleteBucketCORS>

deleteBucketLifecycle

The deleteBucketLifecycle operation deletes the lifecycle configuration from the specified bucket. Amazon S3 removes all the lifecycle configuration rules in the lifecycle subresource associated with the bucket. Your objects never expire, and Amazon S3 no longer automatically deletes any objects on the basis of rules contained in the deleted lifecycle configuration. To use this operation, you must have permission to perform the s3:PutLifecycleConfiguration action. By default, the bucket owner has this permission and the bucket owner can grant this permission to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketLifecycle>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketLifecycle>

Sample request

<deleteBucketLifecycle>
    <bucketName>signv4test</bucketName>
</deleteBucketLifecycle>

deleteBucketReplication

The deleteBucketReplication operation deletes the replication sub-resource associated with the specified bucket. This operation requires permission for the s3:DeleteReplicationConfiguration action. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketReplication>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketReplication>

Sample request

<deleteBucketReplication>
    <bucketName>signv4test</bucketName>
</deleteBucketReplication>

deleteBucketTagging

The deleteBucketTagging operation uses the tagging sub-resource to remove a tag set from the specified bucket. To use this operation, you must have permission to perform the s3:PutBucketTagging action. By default, the bucket owner has this permission and can grant this permission to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketTagging>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketTagging>

Sample request

<deleteBucketTagging>
    <bucketName>signv4test</bucketName>
</deleteBucketTagging>

deleteBucketWebsiteConfiguration

The deleteBucketWebsiteConfiguration operation removes the website configuration for a bucket. Amazon S3 returns a 207 OK response upon successfully deleting a website configuration on the specified bucket. It will give a 200 response if the website configuration you are trying to delete does not exist on the bucket, and a 404 response if the bucket itself does not exist. This operation requires the S3: DeleteBucketWebsite permission. By default, only the bucket owner can delete the website configuration attached to a bucket. However, bucket owners can grant other users permission to delete the website configuration by writing a bucket policy granting them the S3: DeleteBucketWebsite permission. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.deleteBucketWebsiteConfiguration>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.deleteBucketWebsiteConfiguration>

Sample request

<deleteBucketWebsiteConfiguration>
    <bucketName>signv4test</bucketName>
</deleteBucketWebsiteConfiguration>

listObjects

The listObjects operation returns some or all (up to 1000) of the objects in a bucket. The request parameters act as selection criteria to return a subset of the objects in a bucket. To use this implementation of the operation, the user must have READ access to the bucket. See the related API documentation) for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
delimiter	A delimiter is a character used to group keys. All keys that contain the same string between the prefix, if specified, and the first occurrence of the delimiter after the prefixes are grouped under a single result element CommonPrefixes. If the prefix parameter is not specified, the substring starts at the beginning of the key. The keys that are grouped under the CommonPrefixesresult element are not returned elsewhere in the response.	Optional
encodingType	Requests Amazon S3 to encode the response and specifies the encoding method to use. An object key can contain any Unicode character. However, XML 1.0 parser cannot parse some characters such as characters with an ASCII value from 0 to 10. For characters that are not supported in XML 1.0, this parameter can be added to request Amazon S3 to encode the keys in the response.	Optional
marker	Specifies the key to start with when listing objects in a bucket. Amazon S3 lists objects in alphabetical order.	Optional
maxKeys	Sets the maximum number of keys returned in the response body. The response might contain fewer keys but will never contain more.	Optional
prefix	Limits the response to keys that begin with the specified prefix.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.listObjects>
    <bucketName>{$ctx:bucketName}</bucketName>
    <delimiter>{$ctx:delimiter}</delimiter>
    <encodingType>{$ctx:encodingType}</encodingType>
    <marker>{$ctx:marker}</marker>
    <maxKeys>{$ctx:maxKeys}</maxKeys>
    <prefix>{$ctx:prefix}</prefix>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.listObjects>

Sample request

<listObjects>
    <bucketName>signv4test</bucketName>
    <maxKeys>3</maxKeys>
    <encodingType>The name of the bucket.</encodingType>
    <delimiter>images</delimiter>
</listObjects>

getBucketLifecycleConfiguration

The getBucketLifecycleConfiguration operation returns the lifecycle configuration information set on the bucket. To use this operation, permissions should be given to perform the s3:GetLifecycleConfiguration action. The bucket owner has this permission by default and can grant this permission to others. There is usually some time lag before lifecycle configuration deletion is fully propagated to all the Amazon S3 systems. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketLifecycleConfiguration>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketLifecycleConfiguration>

Sample request

<getBucketLifecycleConfiguration>
    <bucketName>signv4test</bucketName>
</getBucketLifecycleConfiguration>

putBucketCORS

The putBucketCORS operation returns the CORS configuration information set for the bucket. To use this operation, you must have permission to perform the s3:putBucketCORS action. By default, the bucket owner has this permission and can grant it to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
corsConfiguration	Container for up to 100 CORSRules elements.	Yes

Sample configuration

<amazons3.putBucketCORS>
    <bucketName>{$ctx:bucketName}</bucketName>
    <corsConfiguration>{$ctx:corsConfiguration}</corsConfiguration>
</amazons3.putBucketCORS>

Sample request

<putBucketCORS>
    <bucketName>signv4test</bucketName>
    <CORSConfiguration>
        <CORSRule>
            <AllowedOrigin>*</AllowedOrigin>
            <AllowedMethod>GET</AllowedMethod>
            <AllowedHeader>*</AllowedHeader>
            <MaxAgeSeconds>3000</MaxAgeSeconds>
        </CORSRule>
    </CORSConfiguration>
</putBucketCORS>

getBucketCORS

The getBucketCORS operation returns the CORS configuration information set for the bucket. To use this operation, you must have permission to perform the s3:getBucketCORS action. By default, the bucket owner has this permission and can grant it to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketCORS>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketCORS>

Sample request

<getBucketCORS>
    <bucketName>signv4test</bucketName>
</getBucketCORS>

getBucketLocation

The getBucketLocation operation returns the lifecycle configuration information set on the bucket. To use this operation, you must be the bucket owner. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketLocation>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketLocation>

Sample request

<getBucketLocation>
    <bucketName>signv4test</bucketName>
</getBucketLocation>

getBucketLogging

The getBucketLogging operation returns the logging status of a bucket and the permissions users have to view and modify that status. To use this operation, you must be the bucket owner. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketLogging>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketLogging>

Sample request

<getBucketLogging>
    <bucketName>signv4test</bucketName>
</getBucketLogging>

getBucketNotificationConfiguration

The getBucketNotificationConfiguration operation returns the lifecycle configuration information set on the bucket. To use this operation, you must be the bucket owner to read the notification configuration of a bucket. However, the bucket owner can use a bucket policy to grant permission to other users to read this configuration with the s3:getBucketNotificationConfiguration permission. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketNotificationConfiguration>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketNotificationConfiguration>

Sample request

<getBucketNotificationConfiguration>
    <bucketName>signv4test</bucketName>
</getBucketNotificationConfiguration>

getBucketTagging

The getBucketTagging operation returns the lifecycle configuration information set on the bucket. To use this operation, you must have permission to perform the s3:GetBucketTagging action. By default, the bucket owner has this permission and can grant this permission to others. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketTagging>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketTagging>

Sample request

<getBucketTagging>
    <bucketName>signv4test</bucketName>
</getBucketTagging>

getBucketReplication

The getBucketReplication operation returns the lifecycle configuration information set on the bucket. To use this operation, you must have permission to perform the s3:GetReplicationConfiguration action. For more information about permissions, go to Using Bucket Policies and User Policies in the Amazon Simple Storage Service Developer Guide. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketReplication>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketReplication>

Sample request

<getBucketReplication>
    <bucketName>signv4test</bucketName>
</getBucketReplication>

getBucketPolicy

The getBucketPolicy operation returns the policy of a specified bucket. To use this operation, the user must have GetPolicy permissions on the specified bucket, and the user must be the bucket owner. If the user does not have GetPolicy permissions, Amazon S3 returns a 403 Access Denied error. If the user has correct permissions, but the user is not the bucket owner, Amazon S3 returns a 405 Method Not Allowed error. If the bucket does not have a policy, Amazon S3 returns a 404 Policy Not found error. There are restrictions about who can create bucket policies and which objects in a bucket they can apply to. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketPolicy>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketPolicy>

Sample request

<getBucketPolicy>
    <bucketName>signv4test</bucketName>
</getBucketPolicy>

listObjectVersions

The listObjectVersions operation lists metadata about all of the versions of objects in a bucket. Request parameters can be used as selection criteria to return metadata about a subset of all the object versions. To use this operation, the user must have READ access to the bucket. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
delimiter	A delimiter is a character used to group keys.	Optional
encodingType	Requests Amazon S3 to encode the response and specifies the encoding method to use.	Optional
keyMarker	Specifies the key in the bucket that you want to start listing from. See also versionIdMarker below.	Optional
maxKeys	Sets the maximum number of keys returned in the response body.	Optional
prefix	Limits the response to keys that begin with the specified prefix.	Optional
versionIdMarker	Specifies the object version you want to start listing from.	Optional

Sample configuration

<amazons3.listObjectVersions>
    <bucketName>{$ctx:bucketName}</bucketName>
    <delimiter>{$ctx:delimiter}</delimiter>
    <encodingType>{$ctx:encodingType}</encodingType>
    <keyMarker>{$ctx:keyMarker}</keyMarker>
    <maxKeys>{$ctx:maxKeys}</maxKeys>
    <prefix>{$ctx:prefix}</prefix>
    <versionIdMarker>{$ctx:versionIdMarker}</versionIdMarker>
</amazons3.listObjectVersions>

Sample request

<listObjectVersions>
    <bucketName>testkeerthu1234</bucketName>
    <delimiter>/</delimiter>
    <maxKeys>3</maxKeys>
    <prefix>images</prefix>
</listObjectVersions>

getBucketRequestPayment

The getBucketRequestPayment operation returns the request payment configuration of a bucket. To use this operation, the user must be the bucket owner. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketRequestPayment>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketRequestPayment>

Sample request

<getBucketRequestPayment>
    <bucketName>signv4test</bucketName>
</getBucketRequestPayment>

getBucketVersioning

The getBucketVersioning operation returns the versioning state of a bucket. To retrieve the versioning state of a bucket, the user must be the bucket owner. This implementation also returns the MFA Delete status of the versioning state. If the MFA Delete status is enabled, the bucket owner must use an authentication device to change the versioning state of the bucket. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketVersioning>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketVersioning>

Sample request

<getBucketVersioning>
    <bucketName>signv4test</bucketName>
</getBucketVersioning>

getBucketWebsite

The getBucketWebsite operation returns the website configuration associated with a bucket. To host the website on Amazon S3, a bucket can be configured as a website by adding a website configuration. This operation requires the S3:GetBucketWebsite permission. By default, only the bucket owner can read the bucket website configuration. However, bucket owners can allow other users to read the website configuration by writing a bucket policy granting them the S3:GetBucketWebsite permission. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketWebsite>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketWebsite>

Sample request

<getBucketWebsite>
    <bucketName>signv4test</bucketName>
</getBucketWebsite>

getBucketACL

The getBucketACL operation returns the access control list (ACL) of a bucket. To return the ACL of the bucket, the user must have READ_ACP access to the bucket. If READ_ACP permission is granted to the anonymous user, you can return the ACL of the bucket without the authorization. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.getBucketACL>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.getBucketACL>

Sample request

headBucket

The headBucket operation is useful to determine if a bucket exists and you have permission to access it. The operation returns a 200 OK if the bucket exists and you have permission to access it. Otherwise, the operation might return responses such as 404 Not Found and 403 Forbidden. See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes

Sample configuration

<amazons3.headBucket>
    <bucketName>{$ctx:bucketName}</bucketName>
</amazons3.headBucket>

Sample request

<headBucket>
    <bucketName>1513162931643testconbkt2</bucketName>
</headBucket>

listMultipartUploads

The listMultipartUploads operation lists in-progress multipart uploads. A multipart upload is in progress when it has been initiated using the Initiate Multipart Upload request but has not yet been completed or aborted. It returns a default value of 1000 multipart uploads in the response. The number of uploads can be further limited in a response by specifying the maxUploads property. If additional multipart uploads satisfy the list criteria, the response will contain an "IsTruncated" element with the value "true". To list the additional multipart uploads, use the keyMarker and uploadIdMarker request parameters.

In the response, the uploads are sorted by key. If the application has initiated more than one multipart upload using the same object key, uploads in the response are first sorted by key. Additionally, uploads are sorted in ascending order within each key by the upload initiation time.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
delimiter	A delimiter is a character you use to group keys. All keys that contain the same string between the prefix, if specified, and the first occurrence of the delimiter after the prefix are grouped under a single result element CommonPrefixes. If you do not specify the prefix parameter, the substring starts at the beginning of the key. The keys that are grouped under the CommonPrefixesresult element are not returned elsewhere in the response.	Optional
encodingType	Requests Amazon S3 to encode the response and specifies the encoding method to use. An object key can contain any Unicode character. However, XML 1.0 parser cannot parse some characters such as characters with an ASCII value from 0 to 10. For characters that are not supported in XML 1.0, you can add this parameter to request Amazon S3 to encode the keys in the response.	Optional
maxUploads	Sets the maximum number of multipart uploads, from 1 to 1,000, to return in the response body. 1,000 is the maximum number of uploads that can be returned in a response.	Optional
keyMarker	Specifies the key to start with when listing objects in a bucket. Amazon S3 lists objects in alphabetical order.	Optional
prefix	Limits the response to keys that begin with the specified prefix.	Optional
uploadIdMarker	Specifies the multipart upload after which listing should begin.	Optional

Sample configuration

<amazons3.listMultipartUploads>
    <bucketName>{$ctx:bucketName}</bucketName>
    <delimiter>{$ctx:delimiter}</delimiter>
    <encodingType>{$ctx:encodingType}</encodingType>
    <maxUploads>{$ctx:maxUploads}</maxUploads>
    <keyMarker>{$ctx:keyMarker}</keyMarker>
    <prefix>{$ctx:prefix}</prefix>
    <uploadIdMarker>{$ctx:uploadIdMarker}</uploadIdMarker>
</amazons3.listMultipartUploads>

Sample request

<listMultipartUploads>
    <bucketName>signv4test</bucketName>
</listMultipartUploads>

Objects

deleteObject

The deleteObject operation removes the null version (if there is one) of an object and inserts a delete marker, which becomes the latest version of the object. If there is no null version, Amazon S3 does not remove any objects.

If the object you want to delete is in a bucket where the bucket versioning configuration is MFA Delete enabled, you must include the mfa in the request. For more information about MFA Delete, see Using MFA Delete .

Following is the proxy configuration for init and deleteObject. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object to be deleted.	Yes
versionId	Version Id of an object to remove a specific object version.	Optional
bypassGovernanceRetention	Indicates whether S3 Object Lock should bypass Governance-mode restrictions to process this operation.	Optional
mfa	Required to permanently delete a versioned object if versioning is configured with MFA Delete enabled. The value is the concatenation of the authentication device's serial number, a space, and the value displayed on your authentication device.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Note: To remove a specific version, the user must be the bucket owner and must use the versionId sub-resource, which permanently deletes the version.

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.deleteObject>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <versionId>{$ctx:versionId}</versionId>
    <bypassGovernanceRetention>{$ctx:bypassGovernanceRetention}</bypassGovernanceRetention>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.deleteObject>

Sample request

<deleteObject>
    <bucketName>signv4test</bucketName>
    <objectKey>testObject1</objectKey>
    <versionId>FHbrL3xf2TK54hLNWWArYI79woSElvHf</versionId>
</deleteObject>

deleteObjects

The deleteObjects operation deletes multiple objects from a bucket using a single HTTP request. If object keys that need to be deleted are known, this operation provides a suitable alternative to sending individual delete requests (deleteObject). The deleteObjects request contains a list of up to 1000 keys that the user wants to delete. In the XML, you provide the object key names, and optionally provide version IDs if you want to delete a specific version of the object from a versioning-enabled bucket. For each key, Amazon S3 performs a delete operation and returns the result of that deletion, success or failure, in the response. Note that if the object specified in the request is not found, Amazon S3 returns the result as deleted.

The deleteObjects operation supports two modes for the response: verbose and quiet. By default, the operation uses the verbose mode in which the response includes the result of deletion of each key in your request. In the quiet mode, the response includes only keys where the delete operation encountered an error. For a successful deletion, the operation does not return any information about the deletion in the response body.

When using the deleteObjects operation that attempts to delete a versioned object on an MFA Delete enabled bucket, you must include an MFA token. If you do not provide one, even if there are non-versioned objects you are attempting to delete. Additionally, f you provide an invalid token, the entire request will fail, regardless of whether there are versioned keys in the request. For more information about MFA Delete, see MFA Delete.

Following is the proxy configuration for init and deleteObjects. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	Name of the bucket.	Yes
bypassGovernanceRetention	Indicates whether S3 Object Lock should bypass Governance-mode restrictions to process this operation.	Optional
mfa	Required to permanently delete a versioned object if versioning is configured with MFA Delete enabled. The value is the concatenation of the authentication device's serial number, a space, and the value displayed on your authentication device.	Optional
deleteConfig	The configuration for deleting the objects. It contains the following properties: Delete: Container for the request. Quiet: Enable quiet mode for the request. When you add this element, you must set its value to true. Default is false. Object: Container element that describes the delete request for each object. Key: Key name of the object to delete. VersionId: Version ID for the specific version of the object to delete.	Yes
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.deleteObjects>
    <bucketName>{$ctx:bucketName}</bucketName>
    <bypassGovernanceRetention>{$ctx:bypassGovernanceRetention}</bypassGovernanceRetention>
    <deleteConfig>{$ctx:deleteConfig}</deleteConfig>
    <mfa>{$ctx:mfa}</mfa>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.deleteObjects>

Sample request

<deleteObjects>
    <bucketName>signv4test</bucketName>
    <Delete>
        <Objects>
            <Object>
                <Key>testobject33</Key>
                <VersionId>M46OVgxl4lHBNCeZwBpEZvGhj0k5vvjK</VersionId>
            </Object>
            <Object>
                <Key>testObject1</Key>
                <VersionId>PwbvPU.yn3YcHOCF8bntKeTdzfKQC6jN</VersionId>
            </Object>
        </Objects>
    </Delete>
</deleteObjects>

getObject

The getObject operation retrieves objects from Amazon S3. To use this operation, the user must have READ access to the object. If the user grants READ access to the anonymous user, the object can be returned without the authorization. By default, this operation returns the latest version of the object.

An Amazon S3 bucket has no directory hierarchy such as in a typical computer file system. However, a logical hierarchy can be created by using object key names that imply a folder structure. For example, instead of naming an object sample.jpg, it could be named photos/2006/February/sample.jpg. To retrieve an object from such a logical hierarchy, the full key name for the object should be specified.

For a virtual hosted-style request example, if you have the object photos/2006/February/sample.jpg, specify the resource as /photos/2006/February/sample.jpg. For a path-style request example, if you have the object photos/2006/February/sample.jpg in the bucket named examplebucket, specify the resource as /examplebucket/photos/2006/February/sample.jpg. If the object to be retrieved is a GLACIER storage class object, the object is archived in Amazon Glacier, and you must first restore a copy before retrieving the object. Otherwise, this operation returns the "InvalidObjectStateError" error.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object to retrieve details for.	Yes
responseContentType	Content-Type property of the response.	Optional
responseContentLanguage	Content-Language property of the response.	Optional
responseExpires	Expires property of the response.	Optional
responseCacheControl	Cache-Control property of the response.	Optional
responseContentDisposition	Content-Disposition property of the response.	Optional
responseContentEncoding	Content-Encoding property of the response.	Optional
range	HTTP range property.	Optional
ifModifiedSince	Return the object only if it has been modified.	Optional
ifUnmodifiedSince	Return the object only if it has not been modified.	Optional
ifMatch	Return the object only if its ETag is the same.	Optional
ifNoneMatch	Return the object only if its ETag is not the same as the one specified.	Optional
versionId	VersionId used to reference a specific version of the object.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
partNumber	Part number of the object being read.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional
destinationFilePath	Specifies the path to the local file where the contents of the response needs to be written. If the destination file already exists or if the file is not writable by the current user, an exception will be thrown. Note: This parameter is available only with Amazon S3 connector v2.0.1 and above.	Optional

Sample configuration

<amazons3.getObject>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <responseContentType>{$ctx:responseContentType}</responseContentType>
    <responseContentLanguage>{$ctx:responseContentLanguage}</responseContentLanguage>
    <responseExpires>{$ctx:responseExpires}</responseExpires>
    <responseCacheControl>{$ctx:responseCacheControl}</responseCacheControl>
    <responseContentDisposition>{$ctx:responseContentDisposition}</responseContentDisposition>
    <responseContentEncoding>{$ctx:responseContentEncoding}</responseContentEncoding>
    <range>{$ctx:range}</range>
    <ifModifiedSince>{$ctx:ifModifiedSince}</ifModifiedSince>
    <ifUnmodifiedSince>{$ctx:ifUnmodifiedSince}</ifUnmodifiedSince>
    <ifMatch>{$ctx:ifMatch}</ifMatch>
    <ifNoneMatch>{$ctx:ifNoneMatch}</ifNoneMatch>
    <versionId>{$ctx:versionId}</versionId>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <partNumber>{$ctx:partNumber}</partNumber>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.getObject>

Sample request

<getObject>
    <bucketName>signv4test</bucketName>
    <objectKey>Tree2.png</objectKey>
    <partNumber>1</partNumber>
</getObject>

putObject

The putObject operation adds an object to a bucket. You must have WRITE permissions on a bucket to add an object to it. Amazon S3 does not add partial objects, so if a success response is received, the entire object is added to the bucket. Because Amazon S3 is a distributed system, if it receives multiple write requests for the same object simultaneously, it overwrites all but the last object written.

To ensure that data is not corrupted traversing the network, use the Content-MD5 parameter. When it is used, Amazon S3 checks the object against the provided MD5 value and, if they do not match, it returns an error. Additionally, you can calculate the MD5 value while putting an object to Amazon S3 and compare the returned ETag with the calculated MD5 value.

When uploading an object, you can specify the accounts or groups that should be granted specific permissions on the object. There are two ways to grant the appropriate permissions using the request parameters: either specify a canned (predefined) ACL using the "acl", or specify access permissions explicitly using the "grantRead", "grantReadACP", "grantWriteACP", and "grantFullControl" parameters. These parameters map to the set of permissions that Amazon S3 supports in an ACL. Use only one approach, not both.

See the related API documentation for more information.

Note

The fileContent parameter is available only with Amazon S3 connector v2.0.2 and above. Either filePath or fileContent parameter is mandatory.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object to retrieve details for.	Yes
filePath	The path of the source file to be uploaded.	Optional
fileContent	Content of the file.	Optional
acl	The canned ACL to apply to the object.	Optional
cacheControl	This can be used to specify caching behavior along the request or reply chain.	Optional
contentDisposition	This specifies presentational information for the object.	Optional
contentEncoding	The language the content is in.	Optional
contentLanguage	This specifies what content encodings have been applied to the object.	Optional
contentType	A standard MIME type describing the format of the object data.	Optional
contentMD5	The base64-encoded 128-bit MD5 digest of the message according to RFC 1864.	Optional
expires	This specifies the date and time at which the object is no longer cacheable.	Optional
grantRead	Allows the specified grantee or grantees to list the objects in the bucket.	Optional
grantReadACP	Allows the specified grantee or grantees to read the bucket ACL.	Optional
grantWriteACP	Allows the specified grantee or grantees to write the ACL for the applicable bucket.	Optional
grantFullControl	Allows the specified grantee or grantees the READ, WRITE, READ_ACP, and WRITE_ACP permissions on the bucket.	Optional
metadata	The metadata. Comma separated key value pair. The key and value are separated by ':'t.	Optional
serverSideEncryption	Specifies the server-side encryption algorithm to use when Amazon S3 creates the target object.	Optional
storageClass	RRS enables customers to reduce their costs by storing non-critical, reproducible data at lower levels of redundancy than Amazon S3's standard storage.	Optional
websiteRedirectLocation	If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this parameter in the object metadata.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
ssekmsKeyId	Specifies the ID of the symmetric customer managed AWS KMS CMK to use for object encryption.	Optional
ssekmsEncryptionContext	Specifies the AWS KMS Encryption Context to use for object encryption.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional
tagging	The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1"). This must be used in conjunction with the TaggingDirective.	Optional
objectLockMode	The object lock mode that you want to apply to the uploaded object.	Optional
objectLockRetainUntilDate	Specifies the date and time when you want the Object Lock to expire.	Optional
objectLockLegalHoldStatus	Specifies whether you want to apply a Legal Hold to the uploaded object.	Optional

Sample configuration

<amazons3.putObject>
    <bucketName>{$url:bucketName}</bucketName>
    <objectKey>{$url:objectKey}</objectKey>
    <filePath>{$url:filePath}</filePath>
    <acl>{$ctx:acl}</acl>
    <cacheControl>{$ctx:cacheControl}</cacheControl>
    <contentDisposition>{$ctx:contentDisposition}</contentDisposition>
    <contentEncoding>{$ctx:contentEncoding}</contentEncoding>
    <contentLanguage>{$ctx:contentLanguage}</contentLanguage>
    <contentType>{$ctx:contentType}</contentType>
    <expires>{$ctx:expires}</expires>
    <grantRead>{$ctx:grantRead}</grantRead>
    <grantReadACP>{$ctx:grantReadACP}</grantReadACP>
    <grantWriteACP>{$ctx:grantWriteACP}</grantWriteACP>
    <grantFullControl>{$ctx:grantFullControl}</grantFullControl>
    <metadata>{$ctx:metadata}</metadata>
    <serverSideEncryption>{$ctx:serverSideEncryption}</serverSideEncryption>
    <storageClass>{$ctx:storageClass}</storageClass>
    <websiteRedirectLocation>{$ctx:websiteRedirectLocation}</websiteRedirectLocation>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <ssekmsKeyId>{$ctx:ssekmsKeyId}</ssekmsKeyId>
    <ssekmsEncryptionContext>{$ctx:ssekmsEncryptionContext}</ssekmsEncryptionContext>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
    <tagging>{$ctx:tagging}</tagging>
    <objectLockMode>{$ctx:objectLockMode}</objectLockMode>
    <objectLockRetainUntilDate>{$ctx:objectLockRetainUntilDate}</objectLockRetainUntilDate>
    <objectLockLegalHoldStatus>{$ctx:objectLockLegalHoldStatus}</objectLockLegalHoldStatus>
</amazons3.putObject>

Sample request

<putObject>
    <bucketName>signv4test</bucketName>
    <objectKey>s3_image.jpg</objectKey>
    <filePath>/Users/mine/Desktop/S3_img.jpg</filePath>
</putObject>

putObjectAcl

The putObjectAcl operation sets the access control list (ACL) permissions for an object that already exists in a bucket. You can specify the ACL in the request body or specify permissions using request, depending on the application needs. For example, if there is an existing application that updates an object ACL using the request body, you can continue to use that approach.

The ACL of an object is set at the object version level. By default, putObjectAcl sets the ACL of the latest version of an object. To set the ACL of a different version, use the versionId property.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	Name of the object whose acl needs to be set.	Yes
accessControlList	Container for ACL information, which includes the following: Grant: Container for the grantee and permissions. Grantee: The subject whose permissions are being set. ID: ID of the grantee. DisplayName: Screen name of the grantee. Permission: Specifies the permission to give to the grantee.	Yes
versionId	Version Id of an object to remove a specific object version.	Optional
acl	The canned ACL to apply to the object.	Optional
grantRead	Allows the specified grantee or grantees to list the objects in the bucket.	Optional
grantWrite	Allows the specified grantee or grantees to create, overwrite, and delete any object in the bucket.	Optional
grantReadACP	Allows the specified grantee or grantees to read the bucket ACL.	Optional
grantWriteACP	Allows the specified grantee or grantees to write the ACL for the applicable bucket.	Optional
grantFullControl	Allows the specified grantee or grantees the READ, WRITE, READ_ACP, and WRITE_ACP permissions on the bucket.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.putObjectAcl>
    <objectKey>{$ctx:objectKey}</objectKey>
    <bucketName>{$ctx:bucketName}</bucketName>
    <accessControlList>{$ctx:accessControlList}</accessControlList>
    <versionId>{$ctx:versionId}</versionId>
    <acl>{$ctx:acl}</acl>
    <grantRead>{$ctx:grantRead}</grantRead>
    <grantReadACP>{$ctx:grantReadACP}</grantReadACP>
    <grantWrite>{$ctx:grantWrite}</grantWrite>
    <grantWriteACP>{$ctx:grantWriteACP}</grantWriteACP>
    <grantFullControl>{$ctx:grantFullControl}</grantFullControl>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.putObjectAcl>

Sample request

<putObjectAcl>
    <bucketName>signv4test</bucketName>
    <objectKey>testObject2</objectKey>
    <versionId>FHbrL3xf2TK54hLNWWArYI79woSElvHf</versionId>
    <acl>authenticated-read</acl>
    <AccessControlPolicy>
        <Owner>
            <ID>c6567b8c9274b78d6af4a3080c5e43e700f560f3517b7d9acc87251412044c35</ID>
        </Owner>
        <Grant>
            <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
                <ID>c6567b8c9274b78d6af4a3080c5e43e700f560f3517b7d9acc87251412044c35</ID>
                <DisplayName>pe.chanaka.ck@gmail.com</DisplayName>
            </Grantee>
            <Permission>WRITE_ACP</Permission>
        </Grant>
        <Grant>
            <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
                <ID>c6567b8c9274b78d6af4a3080c5e43e700f560f3517b7d9acc87251412044c35</ID>
                <DisplayName>pe.chanaka.ck@gmail.com</DisplayName>
            </Grantee>
            <Permission>READ</Permission>
        </Grant>
    </AccessControlPolicy>
</putObjectAcl>

copyBucketObject

The copyBucketObject operation creates a copy of an object that is already stored in Amazon S3. This operation is the same as performing a GET and then a PUT. Adding the "copySource" enables to copy the source object into the destination bucket.

When copying an object, most of the metadata (default) can be preserved, or new metadata can be specified. However, the ACL is not preserved and is set to "private" for the user making the request. All copy requests must be authenticated and cannot contain a message body. Additionally, the user must have the READ access to the source object and WRITE access to the destination bucket. To copy an object only under certain conditions, such as whether the ETag matches or whether the object was modified before or after a specified date with the parameters such as "copySourceIfMatch", "copySourceIfNoneMatch", "copySourceIfUnmodifiedSince", or "copySourceIfModifiedSince" must be used.

There are two instances when the copy request could return an error. One is when Amazon S3 receives the copy request, and the other can occur while Amazon S3 is copying the files. If the error occurs before the copy operation starts, you receive a standard Amazon S3 error. If the error occurs during the copy operation, the error response is embedded in the 200 OK response. This means that a 200 OK response can contain either a success or an error. If the request is an HTTP 1.1 request, the response is chunk encoded. Otherwise, it will not contain the content-length, and you will need to read the entire body.

When copying an object, the accounts or groups that should be granted specific permissions on the object can be specified. There are two ways to grant the appropriate permissions using the request: one is to specify a canned (predefined) ACL using the "acl" parameter, and the other is to specify access permissions explicitly using the "grantRead", "grantReadACP", "grantWriteACP", and "grantFullControl" parameters. These parameters map to the set of permissions that Amazon S3 supports in an ACL. Use only one approach, not both.

Following is the proxy configuration for init and copyBucketObject. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
acl	The canned ACL to apply to the object.	Optional
cacheControl	This can be used to specify caching behavior along the request or reply chain.	Optional
contentDisposition	This specifies presentational information for the object.	Optional
contentEncoding	The language the content is in.	Optional
contentLanguage	This specifies what content encodings have been applied to the object.	Optional
contentType	A standard MIME type describing the format of the object data.	Optional
grantRead	Allows the specified grantee or grantees to list the objects in the bucket.	Optional
grantReadACP	Allows the specified grantee or grantees to read the bucket ACL.	Optional
grantWriteACP	Allows the specified grantee or grantees to write the ACL for the applicable bucket.	Optional
grantFullControl	Allows the specified grantee or grantees the READ, WRITE, READ_ACP, and WRITE_ACP permissions on the bucket.	Optional
copySource	The name of the source bucket and key name of the source object, separated by a slash (/).	Yes
metadataDirective	Specifies whether the metadata is copied from the source object or replaced with metadata provided in the request.	Optional
metadata	New metadata to replace. Comma separated key value pair. The key and value are separated by ':'.	Optional
taggingDirective	Specifies whether the object tag-set are copied from the source object or replaced with tag-set provided in the request.	Optional
copySourceIfMatch	Copies the object if its entity tag (ETag) matches the specified tag. Otherwise, the request returns a 412 HTTP status code error (failed precondition).	Optional
copySourceIfNoneMatch	Copies the object if its entity tag (ETag) is different from the specified ETag. Otherwise, the request returns a 412 HTTP status code error (failed precondition).	Optional
copySourceIfUnmodifiedSince	Copies the object if it has not been modified since the specified time. Oherwise, the request returns a 412 HTTP status code error (failed precondition).	Optional
copySourceIfModifiedSince	Copies the object if it has been modified since the specified time. Otherwise, the request returns a 412 HTTP status code error (failed condition).	Optional
expires	The date and time at which the object is no longer cacheable.	Optional
serverSideEncryption	Specifies the server-side encryption algorithm to use when Amazon S3 creates the target object.	Optional
storageClass	RRS enables customers to reduce their costs by storing non-critical, reproducible data at lower levels of redundancy than Amazon S3's standard storage.	Optional
websiteRedirectLocation	If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this parameter in the object metadata.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
ssekmsKeyId	Specifies the ID of the symmetric customer managed AWS KMS CMK to use for object encryption.	Optional
ssekmsEncryptionContext	Specifies the AWS KMS Encryption Context to use for object encryption.	Optional
copySourceSSECustomerAlgorithm	Specifies the algorithm to use when decrypting the source object.	Optional
copySourceSSECustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use to decrypt the source object.	Optional
copySourceSSECustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional
tagging	The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1"). This must be used in conjunction with the TaggingDirective.	Optional
objectLockMode	The object lock mode that you want to apply to the uploaded object.	Optional
objectLockRetainUntilDate	Specifies the date and time when you want the Object Lock to expire.	Optional
objectLockLegalHoldStatus	Specifies whether you want to apply a Legal Hold to the uploaded object.	Optional
destinationBucket	Name of the destination bucket to copy the object.	Yes
destinationKey	The destination where the source will be copied.	Yes

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.copyBucketObject>
    <copySource>{$ctx:copySource}</copySource>
    <acl>{$ctx:acl}</acl>
    <cacheControl>{$ctx:cacheControl}</cacheControl>
    <contentDisposition>{$ctx:contentDisposition}</contentDisposition>
    <contentEncoding>{$ctx:contentEncoding}</contentEncoding>
    <contentLanguage>{$ctx:contentLanguage}</contentLanguage>
    <contentType>{$ctx:contentType}</contentType>
    <copySourceIfMatch>{$ctx:copySourceIfMatch}</copySourceIfMatch>
    <copySourceIfModifiedSince>{$ctx:copySourceIfModifiedSince}</copySourceIfModifiedSince>
    <copySourceIfNoneMatch>{$ctx:copySourceIfNoneMatch}</copySourceIfNoneMatch>
    <copySourceIfUnmodifiedSince>{$ctx:copySourceIfUnmodifiedSince}</copySourceIfUnmodifiedSince>
    <expires>{$ctx:expires}</expires>
    <grantRead>{$ctx:grantRead}</grantRead>
    <grantReadACP>{$ctx:grantReadACP}</grantReadACP>
    <grantWriteACP>{$ctx:grantWriteACP}</grantWriteACP>
    <grantFullControl>{$ctx:grantFullControl}</grantFullControl>
    <metadataDirective>{$ctx:metadataDirective}</metadataDirective>
    <metadata>{$ctx:metadata}</metadata>
    <taggingDirective>{$ctx:taggingDirective}</taggingDirective>
    <tagging>{$ctx:tagging}</tagging>
    <serverSideEncryption>{$ctx:serverSideEncryption}</serverSideEncryption>
    <storageClass>{$ctx:storageClass}</storageClass>
    <websiteRedirectLocation>{$ctx:websiteRedirectLocation}</websiteRedirectLocation>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <ssekmsKeyId>{$ctx:ssekmsKeyId}</ssekmsKeyId>
    <ssekmsEncryptionContext>{$ctx:ssekmsEncryptionContext}</ssekmsEncryptionContext>
    <copySourceSSECustomerAlgorithm>{$ctx:copySourceSSECustomerAlgorithm}</copySourceSSECustomerAlgorithm>
    <copySourceSSECustomerKey>{$ctx:copySourceSSECustomerKey}</copySourceSSECustomerKey>
    <copySourceSSECustomerKeyMD5>{$ctx:copySourceSSECustomerKeyMD5}</copySourceSSECustomerKeyMD5>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
    <objectLockMode>{$ctx:objectLockMode}</objectLockMode>
    <objectLockRetainUntilDate>{$ctx:objectLockRetainUntilDate}</objectLockRetainUntilDate>
    <objectLockLegalHoldStatus>{$ctx:objectLockLegalHoldStatus}</objectLockLegalHoldStatus>
    <destinationBucket>{$ctx:destinationBucket}</destinationBucket>
    <destinationKey>{$ctx:destinationKey}</destinationKey>
</amazons3.copyBucketObject>

Sample request

<copyBucketObject>
    <bucketName>signv4test</bucketName>
    <copySource>/imagesBucket5/testObject37</copySource>
    <destinationObject>testObject5</destinationObject>
</copyBucketObject>

uploadPart

The uploadPart operation uploads a part in a multipart upload. In this operation, you provide part data in your request. However, you have an option to specify your existing Amazon S3 object as the data source for the part being uploaded. You must initiate a multipart upload (see createMultipartUpload) before you can upload any part. In response to your initiate request, Amazon S3 returns an upload ID, which is the unique identifier that must be included in the upload part request.

Part numbers can be any number from 1 to 10,000 (inclusive). A part number uniquely identifies a part and also defines its position within the object being created. If a new part is uploaded using the same part number that was used with a previous part, the previously uploaded part is overwritten. Each part must be at least 5 MB in size, except the last part. There is no size limit on the last part of your multipart upload.

To ensure that data is not corrupted when traversing the network, specify the Content-MD5 parameter in the upload part request. Amazon S3 checks the part data against the provided MD5 value. If they do not match, Amazon S3 returns an error. After the multipart upload is initiated and one or more parts are uploaded, you must either complete or abort multipart upload in order to stop getting charged for storage of the uploaded parts. Only after you either complete or abort multipart upload will Amazon S3 free up the parts storage and stop charging you for the parts storage.

See the related API documentation for more information.

Note

The fileContent parameter is available only with Amazon S3 connector v2.0.2 and above. Either filePath or fileContent parameter is mandatory.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name to give for the newly created object.	Yes
uploadId	This specifies the ID of the initiated multipart upload.	Yes
partNumber	Part number that identifies the part.	Yes
filePath	The path of the source file to be uploaded.	Optional
fileContent	Content of the file.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.uploadPart>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <uploadId>{$ctx:uploadId}</uploadId>
    <partNumber>{$ctx:partNumber}</partNumber>
    <filePath>{$url:filePath}</filePath>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.uploadPart>

Sample request

<amazons3.uploadPart>
    <bucketName>signv4test</bucketName>
    <objectKey>testObj.jpg</objectKey>
    <uploadId>cI0BzCZ7cx69YP.dhqpwEZAhgH7IzLVuOYjZVZdrmR9LSYAnxPqyYXlzHWGG3hgyH_MuJkTO8cltkaOK.TeG_7zBjFrjJduFCuFLDwah.ZXK7pvlTTDPQAaTRLW_o4FR</uploadId>
    <partNumber>1</partNumber>
    <filePath>/Users/mine/Desktop/S3_img.jpg</filePath>
</amazons3.uploadPart>

completeMultipartUpload

The completeMultipartUpload operation completes a multipart upload by assembling previously uploaded parts. You should first initiate the multipart upload using createMultipartUpload, and then upload all parts using uploadParts. After you successfully upload all relevant parts of an upload, call completeMultipartUpload to complete the upload. When you call completeMultipartUpload, Amazon S3 concatenates all the parts in ascending order by part number to create a new object. In the completeMultipartUpload request, you must provide the complete parts list (see listParts). For each part in the list, the part number and the ETag value must be provided. When the part is uploaded the part number and the ETag value should be returned.

Processing of a completeMultipartUpload request can take several minutes. After Amazon S3 begins processing the request, it sends an HTTP response header that specifies a 200 OK response. While processing is in progress, Amazon S3 periodically sends whitespace characters to keep the connection from timing out. Because a request could fail after the initial 200 OK response has been sent, it is important that you check the response body to determine whether the request succeeded. If completeMultipartUpload fails, applications should be prepared to retry the failed requests.

See the related API documentation for more information.

Parameter Name	Description	Required
completedPartDetails	The container that holds the completed part details. The part details are as follows: part: The container for elements related to a previously uploaded part. PartNumber: The part number that identifies the part. ETag: The entity tag returned when the part is uploaded.	Yes
bucketName	The name of the bucket.	Yes
objectKey	The name to give the newly created object.	Yes
uploadId	This specifies the ID of the current multipart upload.	Yes
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.completeMultipartUpload>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <uploadId>{$ctx:uploadId}</uploadId>
    <completedPartDetails>{$ctx:completedPartDetails}</completedPartDetails>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.completeMultipartUpload>

Sample request

<completeMultipartUpload>
    <bucketName>signv4test</bucketName>
    <objectKey>myimage.png</objectKey>
    <uploadId>VONszTPldyDo80ARdEMI2kVxEBLQYY1tncD7PpB54WDtLTACJIn.jWRIGo7iL_EkJYn9Z2BT3MM.kEqju9CgLyUveDtl6MgXzRYqjb8R4L.ZVpUhv25d56P2Tk1XnD0C</uploadId>
    <CompletedPartDetails>
        <CompletedPart>
            <PartNumber>1</PartNumber>
            <ETag>LKJLINTLNM9879NL7jNLk</ETag>
        </CompletedPart>
    </CompletedPartDetails>
</completeMultipartUpload>

abortMultipartUpload

The abortMultipartUpload operation aborts a multipart upload. After a multipart upload is aborted, no additional parts can be uploaded using that upload ID. The storage consumed by any previously uploaded parts will be freed. However, if any part uploads are currently in progress, those part uploads might or might not succeed. As a result, it might be necessary to abort a given multipart upload multiple times in order to completely free all storage consumed by all parts. To verify that all parts have been removed so that you do not get charged for the part storage, call the listParts operation and ensure the parts list is empty.

Following is the proxy configuration for init and abortMultipartUpload. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
uploadId	This specifies the ID of the current multipart upload.	Yes
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.abortMultipartUpload>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <uploadId>{$ctx:uploadId}</uploadId>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.abortMultipartUpload>

Sample request

<abortMultipartUpload>
    <bucketName>signv4test</bucketName>
    <objectKey>myimage.png</objectKey>
    <uploadId>VONszTPldyDo80ARdEMI2kVxEBLQYY1tncD7PpB54WDtLTACJIn.jWRIGo7iL_EkJYn9Z2BT3MM.kEqju9CgLyUveDtl6MgXzRYqjb8R4L.ZVpUhv25d56P2Tk1XnD0C</uploadId>
</abortMultipartUpload>

listParts

The listParts operation lists the parts that have been uploaded for a specific multipart upload.

This operation must include the upload ID, which can be obtained using the createMultipartUpload operation. The listParts operation returns a maximum of 1,000 uploaded parts. The default number of parts returned is 1,000 parts, but you can restrict the number of parts using the maxParts property. If the multipart upload consists of more than 1,000 parts, the response returns an IsTruncated field with the value of true and a NextPartNumberMarker element. In subsequent listParts requests, you can include the partNumberMarker query string parameter and set its value to the NextPartNumberMarker field value from the previous response.

Following is the proxy configuration for init and listParts. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
uploadId	The ID of the upload.	Yes
maxParts	Maximum number of parts allowed in the response.	Optional
partNumberMarker	Specifies the part after which listing should begin. Only parts with higher part numbers will be listed.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.listParts>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <uploadId>{$ctx:uploadId}</uploadId>
    <maxParts>{$ctx:maxParts}</maxParts>
    <partNumberMarker>{$ctx:partNumberMarker}</partNumberMarker>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.listParts>

Sample request

<listParts>
    <bucketName>signv4test</bucketName>
    <objectKey>myimage.png</objectKey>
    <uploadId>KyxZ7yjpSSZM9f0bdRectMF5dPg2h08BqTsmWf.8OEIq2Z4YvYg01LmJL0kVDqVcz2utci2CDE2Cn7k647j_84GhExGAN9uer65jljH_oapI758RA_AmcyW4N2usGHH0</uploadId>
    <maxParts>100</maxParts>
    <partNumberMarker>8</partNumberMarker>
</listParts>

createMultipartUpload

The createMultipartUpload operation initiates a multipart upload and returns an upload ID. This upload ID is used to associate all the parts in the specific multipart upload. You specify this upload ID in each of your subsequent uploadPart requests. You also include this upload ID in the final request to either complete or abort the multipart upload request.

For request signing, multipart upload is just a series of regular requests: you initiate multipart upload, send one or more requests to upload parts (uploadPart), and finally complete multipart upload (completeMultipartUpload). You sign each request individually. After you initiate multipart upload and upload one or more parts, you must either complete or abort multipart upload in order to stop getting charged for storage of the uploaded parts. Only after you either complete or abort multipart upload will Amazon S3 free up the parts storage and stop charging you for the parts storage.

Following is the proxy configuration for init and createMultipartUpload. The init section has connection parameters.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
acl	The canned ACL to apply to the object.	Optional
grantRead	Allows the specified grantee or grantees to list the objects in the bucket.	Optional
grantReadACP	Allows the specified grantee or grantees to read the bucket ACL.	Optional
grantWriteACP	Allows the specified grantee or grantees to write the ACL for the applicable bucket.	Optional
grantFullControl	Allows the specified grantee or grantees the READ, WRITE, READ_ACP, and WRITE_ACP permissions on the bucket.	Optional
metadata	Specifies whether the metadata is copied from the source object or replaced with metadata provided in the request.	Optional
serverSideEncryption	Specifies the server-side encryption algorithm to use when Amazon S3 creates the target object.	Optional
storageClass	RRS enables customers to reduce their costs by storing non-critical, reproducible data at lower levels of redundancy than Amazon S3's standard storage.	Optional
websiteRedirectLocation	If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this parameter in the object metadata.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
ssekmsKeyId	Specifies the ID of the symmetric customer managed AWS KMS CMK to use for object encryption.	Optional
ssekmsEncryptionContext	Specifies the AWS KMS Encryption Context to use for object encryption.	Optional
cacheControl	This can be used to specify caching behavior along the request or reply chain.	Optional
contentDisposition	This specifies presentational information for the object.	Optional
contentEncoding	This specifies what content encodings have been applied to the object.	Optional
contentLanguage	This specifies what content encodings have been applied to the object.	Optional
contentType	A standard MIME type describing the format of the object data.	Optional
expires	The date and time at which the object is no longer cacheable.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional
tagging	The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For example, "Key1=Value1"). This must be used in conjunction with the TaggingDirective.	Optional
objectLockMode	The object lock mode that you want to apply to the uploaded object.	Optional
objectLockRetainUntilDate	Specifies the date and time when you want the Object Lock to expire.	Optional
objectLockLegalHoldStatus	Specifies whether you want to apply a Legal Hold to the uploaded object.	Optional

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.createMultipartUpload>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <acl>{$ctx:acl}</acl>
    <cacheControl>{$ctx:cacheControl}</cacheControl>
    <contentDisposition>{$ctx:contentDisposition}</contentDisposition>
    <contentEncoding>{$ctx:contentEncoding}</contentEncoding>
    <contentLanguage>{$ctx:contentLanguage}</contentLanguage>
    <contentType>{$ctx:contentType}</contentType>
    <expires>{$ctx:expires}</expires>
    <grantRead>{$ctx:grantRead}</grantRead>
    <grantReadACP>{$ctx:grantReadACP}</grantReadACP>
    <grantWriteACP>{$ctx:grantWriteACP}</grantWriteACP>
    <grantFullControl>{$ctx:grantFullControl}</grantFullControl>
    <metadata>{$ctx:metadata}</metadata>
    <serverSideEncryption>{$ctx:serverSideEncryption}</serverSideEncryption>
    <storageClass>{$ctx:storageClass}</storageClass>
    <websiteRedirectLocation>{$ctx:websiteRedirectLocation}</websiteRedirectLocation>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <ssekmsKeyId>{$ctx:ssekmsKeyId}</ssekmsKeyId>
    <ssekmsEncryptionContext>{$ctx:ssekmsEncryptionContext}</ssekmsEncryptionContext>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
    <tagging>{$ctx:tagging}</tagging>
    <objectLockMode>{$ctx:objectLockMode}</objectLockMode>
    <objectLockRetainUntilDate>{$ctx:objectLockRetainUntilDate}</objectLockRetainUntilDate>
    <objectLockLegalHoldStatus>{$ctx:objectLockLegalHoldStatus}</objectLockLegalHoldStatus>
</amazons3.createMultipartUpload>

Sample request

<createMultipartUpload>
    <bucketName>signv4test</bucketName>
    <objectKey>upload.png</objectKey>
    <metadata>Content-Language:enus</metadata>
    <serverSideEncryption>AES256</serverSideEncryption>
    <storageClass>STANDARD</storageClass>
</createMultipartUpload>

multipartUpload

The multipartUpload operation initializes and completes a multipart upload by uploading parts to that specific multipart upload.

Following is the proxy configuration for init and multipartUpload. The init section has connection parameters.

Note

The fileContent parameter is available only with Amazon S3 connector v2.0.2 and above. Either filePath or fileContent parameter is mandatory.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
partDetails	This contains all the parts with the part numbers.	Yes
filePath	The path of the source file to be uploaded.	Optional
fileContent	Content of the file.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.init>
    <awsAccessKeyId>{$ctx:awsAccessKeyId}</awsAccessKeyId>
    <awsSecretAccessKey>{$ctx:awsSecretAccessKey}</awsSecretAccessKey>
    <name>{$ctx:connectionName}</name>
    <region>{$ctx:region}</region>
</amazons3.init>

<amazons3.multipartUpload>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <partDetails>{$ctx:partDetails}</partDetails>
    <filePath>{$ctx:filePath}</filePath>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.multipartUpload>

Sample request

<multipartUpload>
    <bucketName>signv4test</bucketName>
    <objectKey>myimage.png</objectKey>
    <filePath>/Users/mine/Desktop/10MB.mp4</filePath>
    <PartDetails>
        <Part>
            <PartNumber>1</PartNumber>
        </Part>
        <Part>
            <PartNumber>2</PartNumber>
        </Part>
    </PartDetails>
</multipartUpload>

getObjectACL

The getObjectACL operation uses the ACL subresource to return the access control list (ACL) of an object. To use this operation, you must have READ_ACP access to the object.

Following is the proxy configuration for getObjectACL.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
versionId	VersionId used to reference a specific version of the object.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.getObjectACL>
    <objectKey>{$ctx:objectKey}</objectKey>
    <bucketName>{$ctx:bucketName}</bucketName>
    <versionId>{$ctx:versionId}</versionId>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.getObjectACL>

Sample request

<getObjectACL>
    <bucketName>signv4test</bucketName>
    <objectKey>testFile.txt</objectKey>
</getObjectACL>

getObjectTagging

The getObjectTagging operation returns the tag-set of an object. You send the request against the tagging subresource associated with the object.

By default, this operation returns information about current version of an object. To retrieve tags of any other version, use the versionId parameter.

To use this operation, you must have permission to perform the s3:GetObjectTagging action. To retrieve tags of a version, you need permission for the s3:GetObjectVersionTagging action.

Following is the proxy configuration for getObjectTagging.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
versionId	The version id of the object to retrieve tags of it.	Optional

Sample configuration

<amazons3.getObjectTagging>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <versionId>{$ctx:versionId}</versionId>
</amazons3.getObjectTagging>

Sample request

<getObjectTagging>
    <bucketName>signv4test</bucketName>
    <objectKey>testFile.txt</objectKey>
</getObjectTagging>

getObjectTorrent

The getObjectTorrent operation uses the torrent subresource to return torrent files from a bucket. BitTorrent can save you bandwidth when you're distributing large files.

You can get torrent only for objects that are less than 5 GB in size and that are not encrypted using server-side encryption with customer-provided encryption key.

To use this operation, you must have READ access to the object.

Following is the proxy configuration for getObjectTorrent.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
torrentFilePath	The path of the torrent file to be created.	Yes
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.getObjectTorrent>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <torrentFilePath>{$ctx:torrentFilePath}</torrentFilePath>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.getObjectTorrent>

Sample request

<getObjectTorrent>
    <bucketName>signv4test</bucketName>
    <objectKey>testFile.txt</objectKey>
    <torrentFilePath>/Users/mine/Desktop/testFile.torrent</torrentFilePath>
</getObjectTorrent>

restoreObject

The restoreObject operation restores a temporary copy of an archived object. You can optionally provide version ID to restore specific object version. If version ID is not provided, it will restore the current version. The number of days that you want the restored copy will be determined by numberOfDays. After the specified period, Amazon S3 deletes the temporary copy. Note that the object remains archived; Amazon S3 deletes only the restored copy.

An object in the Glacier storage class is an archived object. To access the object, you must first initiate a restore request, which restores a copy of the archived object. Restore jobs typically complete in three to five hours.

Following is the proxy configuration for restoreObject.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name of the object.	Yes
versionId	Version Id of an object to restore a specific object version.	Optional
restoreRequest	Container for the RestoreRequest parameters (Days, Description, GlacierJobParameters, OutputLocation, SelectParameters, Tier and Type).	Yes
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.restoreObject>
    <objectKey>{$ctx:objectKey}</objectKey>
    <bucketName>{$ctx:bucketName}</bucketName>
    <versionId>{$ctx:versionId}</versionId>
    <restoreRequest>{$ctx:restoreRequest}</restoreRequest>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.restoreObject>

Sample request

<restoreObject>
    <bucketName>signv4test</bucketName>
    <objectKey>testFile.txt</objectKey>
    <RestoreRequest>
        <Days>2</Days>
        <GlacierJobParameters>
            <Tier>Expedited</Tier>
        </GlacierJobParameters>
    </RestoreRequest>
</restoreObject>

uploadPartCopy

The uploadPartCopy operation uploads a part by copying data from an existing object as data source. You specify the data source by adding the copySource in your request and a byte range by adding the copySourceRange in your request. The minimum allowable part size for a multipart upload is 5 MB.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name to give the newly created object.	Yes
uploadId	This specify the ID of the initiated multipart upload.	Yes
partNumber	This specify the number or the index of the uploaded part.	Yes
copySource	The name of the source bucket and key name of the source object, separated by a slash (/).	Yes
copySourceRange	Copy the specified range bytes of an object.	Optional
ifModifiedSince	Return the object only if it has been modified.	Optional
ifUnmodifiedSince	Return the object only if it has not been modified.	Optional
ifMatch	Return the object only if its ETag is the same.	Optional
ifNoneMatch	Returns the object only if its ETag is not the same as the one specified.	Optional
copySourceSSECustomerAlgorithm	Specifies the algorithm to use when decrypting the source object.	Optional
copySourceSSECustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use to decrypt the source object.	Optional
copySourceSSECustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.uploadPartCopy>
    <objectKey>{$ctx:objectKey}</objectKey>
    <bucketName>{$ctx:bucketName}</bucketName>
    <uploadId>{$ctx:uploadId}</uploadId>
    <partNumber>{$ctx:partNumber}</partNumber>
    <copySource>/imagesBucket5/testObject37</copySource>
    <copySourceRange>{$ctx:copySourceRange}</copySourceRange>
    <ifModifiedSince>{$ctx:ifModifiedSince}</ifModifiedSince>
    <ifUnmodifiedSince>{$ctx:ifUnmodifiedSince}</ifUnmodifiedSince>
    <ifMatch>{$ctx:ifMatch}</ifMatch>
    <ifNoneMatch>{$ctx:ifNoneMatch}</ifNoneMatch>
    <copySourceSSECustomerAlgorithm>{$ctx:copySourceSSECustomerAlgorithm}</copySourceSSECustomerAlgorithm>
    <copySourceSSECustomerKey>{$ctx:copySourceSSECustomerKey}</copySourceSSECustomerKey>
    <copySourceSSECustomerKeyMD5>{$ctx:copySourceSSECustomerKeyMD5}</copySourceSSECustomerKeyMD5>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.uploadPartCopy>

Sample request

<uploadPartCopy>
    <bucketName>signv4test</bucketName>
    <objectKey>testFile1.txt</objectKey>
    <uploadId>SsNUDqUklMaoV_IfePCpGAZHjaxJx.cGXEcX6TVW4I6WzOQFnAKomYevz5qi5LtkfTvlpwjY9M6QDGsIIvdGEQzBURo3MMU2Yh.ZEQDsk_lsnx3Z8m9jsglW6FIfKGQ_</uploadId>
    <partNumber>2</partNumber>
    <copySource>/testBucket1/testFile.jpg</copySource>
    <range>bytes=0-9</range>
</uploadPartCopy>

headObject

The headObject operation retrieves metadata from an object without returning the object itself. This operation is useful if you are interested only in an object's metadata. To use this operation, you must have READ access to that object. A HEAD request has the same options as a GET operation on an object. The response is identical to the GET response except that there is no response body.

See the related API documentation for more information.

Parameter Name	Description	Required
bucketName	The name of the bucket.	Yes
objectKey	The name to give the newly created object.	Yes
range	The specified range bytes of an object to download.	Optional
ifModifiedSince	Return the object only if it has been modified since the specified time.	Optional
ifUnmodifiedSince	Return the object only if it has not been modified since the specified time.	Optional
ifMatch	Return the object only if its entity tag (ETag) is the same as the one specified.	Optional
ifNoneMatch	Return the object only if its entity tag (ETag) is different from the one specified.	Optional
versionId	VersionId used to reference a specific version of the object.	Optional
sseCustomerAlgorithm	Specifies the algorithm to use to when encrypting the object.	Optional
sseCustomerKey	Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data.	Optional
sseCustomerKeyMD5	Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321.	Optional
partNumber	Part number of the object being read.	Optional
requestPayer	Confirms that the requester knows that they will be charged for the request.	Optional

Sample configuration

<amazons3.headObject>
    <bucketName>{$ctx:bucketName}</bucketName>
    <objectKey>{$ctx:objectKey}</objectKey>
    <range>{$ctx:range}</range>
    <ifModifiedSince>{$ctx:ifModifiedSince}</ifModifiedSince>
    <ifUnmodifiedSince>{$ctx:ifUnmodifiedSince}</ifUnmodifiedSince>
    <ifMatch>{$ctx:ifMatch}</ifMatch>
    <ifNoneMatch>{$ctx:ifNoneMatch}</ifNoneMatch>
    <versionId>{$ctx:versionId}</versionId>
    <sseCustomerAlgorithm>{$ctx:sseCustomerAlgorithm}</sseCustomerAlgorithm>
    <sseCustomerKey>{$ctx:sseCustomerKey}</sseCustomerKey>
    <sseCustomerKeyMD5>{$ctx:sseCustomerKeyMD5}</sseCustomerKeyMD5>
    <partNumber>{$ctx:partNumber}</partNumber>
    <requestPayer>{$ctx:requestPayer}</requestPayer>
</amazons3.headObject>

Sample request

<headObject>
  <bucketName>signv4test</bucketName>
  <objectKey>testObject2</objectKey>
</headObject>

Top