aws-sdk-resources 2.11.562 → 2.11.567

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b6ac0e253aa72fe0c66930c23a50c0f1e944e79e500febf995d11aba32bc80a7
-  data.tar.gz: 8f60593f8927f98912a6655231a22cdfadc747e276d0f1ef277835f0a8dc3163
+  metadata.gz: 9189160e2aaa6aacd9e34e0320034aaa3ce95cf6cf10aea8013cef39478a895e
+  data.tar.gz: 22e2052188cd327fad94507ae3c85f85da6d1e10ef412e6d81028c96356345f4
 SHA512:
-  metadata.gz: c6d6b6eddfead95cc30c36f3d6d760353edcea6387d4213c2164d5b5afa063836cf24c929e9f1d9efa4f1ce8b0a1ca1d53b6376531d494c11e38cf0056f57ac2
-  data.tar.gz: 4df465e650e56888d180f7c9b3adea51f4be02b5b456eb971a4c8193948aa0dd6a67cec90bc35cc3bc0b654599dbc2365fad31247df232d2b637dea7e9575287
+  metadata.gz: 11f0db5aace8b89d37f4921a0ae4a480b66d83cf309838573f09d86f709864de051e9ba9781b305a4f668c2d5695781f90522a5b5fe1cc841872d1278bdd0907
+  data.tar.gz: 78e69b1b7de41d7688dee9950a6aa23e6c712698181db36abced93aa53693804e33d7adcb922a2af8c3c7c0d3e4ccf6734472047ae5e47bcef482426d9ccea68

data/lib/aws-sdk-resources/services/s3/encryption/decrypt_handler.rb

@@ -7,6 +7,7 @@ module Aws
     module Encryption
       # @api private
       class DecryptHandler < Seahorse::Client::Handler
+        @@warned_response_target_proc = false
 
         V1_ENVELOPE_KEYS = %w(
           x-amz-key
@@ -45,6 +46,16 @@ module Aws
         def call(context)
           attach_http_event_listeners(context)
           apply_cse_user_agent(context)
+
+          if context[:response_target].is_a?(Proc) && !@@warned_response_target_proc
+            @@warned_response_target_proc = true
+            warn(':response_target is a Proc, or a block was provided. ' \
+              'Read the entire object to the ' \
+              'end before you start using the decrypted data. This is to ' \
+              'verify that the object has not been modified since it ' \
+              'was encrypted.')
+          end
+
           @handler.call(context)
         end
 
@@ -75,11 +86,11 @@ module Aws
         end
 
         def decryption_cipher(context)
-          if envelope = get_encryption_envelope(context)
+          if (envelope = get_encryption_envelope(context))
             cipher = context[:encryption][:cipher_provider]
                      .decryption_cipher(
                        envelope,
-                       kms_encryption_context: context[:encryption][:kms_encryption_context]
+                       context[:encryption]
                      )
             [cipher, envelope]
           else

data/lib/aws-sdk-resources/services/s3/encryption/io_decrypter.rb

@@ -9,9 +9,10 @@ module Aws
         # @param [OpenSSL::Cipher] cipher
         # @param [IO#write] io An IO-like object that responds to `#write`.
         def initialize(cipher, io)
-          @cipher = cipher.clone
+          @cipher = cipher
           # Ensure that IO is reset between retries
           @io = io.tap { |io| io.truncate(0) if io.respond_to?(:truncate) }
+          @cipher_buffer = String.new
         end
 
         # @return [#write]
@@ -19,17 +20,17 @@ module Aws
 
         def write(chunk)
           # decrypt and write
-          @io.write(@cipher.update(chunk))
+          if @cipher.method(:update).arity == 1
+            @io.write(@cipher.update(chunk))
+          else
+            @io.write(@cipher.update(chunk, @cipher_buffer))
+          end
         end
 
         def finalize
           @io.write(@cipher.final)
         end
 
-        def size
-          @io.size
-        end
-
       end
     end
   end

data/lib/aws-sdk-resources/services/s3/encryptionV2/client.rb

@@ -71,6 +71,7 @@ module Aws
     # ## Required Configuration
     #
     # You must configure all of the following:
+    #
     # * a key or key provider - See the Keys section below. The key provided determines
     #   the key wrapping schema(s) supported for both encryption and decryption.
     # * `key_wrap_schema` - The key wrapping schema. It must match the type of key configured.
@@ -234,6 +235,7 @@ module Aws
         def_delegators :@client, :config, :delete_object, :head_object, :build_request
 
         # Creates a new encryption client. You must configure all of the following:
+        #
         # * a key or key provider - The key provided also determines the key wrapping
         #   schema(s) supported for both encryption and decryption.
         # * `key_wrap_schema` - The key wrapping schema. It must match the type of key configured.
@@ -387,7 +389,7 @@ module Aws
         # @option (see S3::Client#get_object)
         # @return (see S3::Client#get_object)
         # @see S3::Client#get_object
-        # @note The `:range` request parameter is not yet supported.
+        # @note The `:range` request parameter is not supported.
         def get_object(params = {}, &block)
           if params[:range]
             raise NotImplementedError, '#get_object with :range not supported'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-resources
 version: !ruby/object:Gem::Version
-  version: 2.11.562
+  version: 2.11.567
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-07 00:00:00.000000000 Z
+date: 2020-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.11.562
+        version: 2.11.567
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.11.562
+        version: 2.11.567
 description: AWS SDK For Ruby V2 has been marked as deprecated. Please upgrade to
   AWS SDK For Ruby V3.Provides resource oriented interfaces and other higher-level
   abstractions for many AWS services. This gem is part of the official AWS SDK for