aws-sdk-resources 2.3.23 → 3.69.0

data/lib/aws-sdk-resources/services/s3/encryption/key_provider.rb

@@ -1,29 +0,0 @@
-module Aws
-  module S3
-    module Encryption
-
-      # This module defines the interface required for a {Client#key_provider}.
-      # A key provider is any object that:
-      #
-      # * Responds to {#encryption_materials} with an {Materials} object.
-      #
-      # * Responds to {#key_for}, receiving a JSON document String,
-      #   returning an encryption key. The returned encryption key
-      #   must be one of:
-      #
-      #   * `OpenSSL::PKey::RSA` - for asymmetric encryption
-      #   * `String` - 32, 24, or 16 bytes long, for symmetric encryption
-      #
-      module KeyProvider
-
-        # @return [Materials]
-        def encryption_materials; end
-
-        # @param [String<JSON>] materials_description
-        # @return [OpenSSL::PKey::RSA, String] encryption_key
-        def key_for(materials_description); end
-
-      end
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/encryption/kms_cipher_provider.rb

@@ -1,71 +0,0 @@
-require 'base64'
-
-module Aws
-  module S3
-    module Encryption
-      # @api private
-      class KmsCipherProvider
-
-        def initialize(options = {})
-          @kms_key_id = options[:kms_key_id]
-          @kms_client = options[:kms_client]
-        end
-
-        # @return [Array<Hash,Cipher>] Creates an returns a new encryption
-        #   envelope and encryption cipher.
-        def encryption_cipher
-          encryption_context = { "kms_cmk_id" => @kms_key_id }
-          key_data = @kms_client.generate_data_key(
-            key_id: @kms_key_id,
-            encryption_context: encryption_context,
-            key_spec: 'AES_256',
-          )
-          cipher = Utils.aes_encryption_cipher(:CBC)
-          cipher.key = key_data.plaintext
-          envelope = {
-            'x-amz-key-v2' => encode64(key_data.ciphertext_blob),
-            'x-amz-iv' => encode64(cipher.iv = cipher.random_iv),
-            'x-amz-cek-alg' => 'AES/CBC/PKCS5Padding',
-            'x-amz-wrap-alg' => 'kms',
-            'x-amz-matdesc' => Json.dump(encryption_context)
-          }
-          [envelope, cipher]
-        end
-
-        # @return [Cipher] Given an encryption envelope, returns a
-        #   decryption cipher.
-        def decryption_cipher(envelope)
-          encryption_context = Json.load(envelope['x-amz-matdesc'])
-          key = @kms_client.decrypt(
-            ciphertext_blob: decode64(envelope['x-amz-key-v2']),
-            encryption_context: encryption_context,
-          ).plaintext
-          iv = decode64(envelope['x-amz-iv'])
-          block_mode =
-            case envelope['x-amz-cek-alg']
-            when 'AES/CBC/PKCS5Padding'
-              :CBC
-            when 'AES/GCM/NoPadding'
-              :GCM
-            else
-              type = envelope['x-amz-cek-alg'].inspect
-              msg = "unsupported content encrypting key (cek) format: #{type}"
-              raise Errors::DecryptionError, msg
-            end
-          Utils.aes_decryption_cipher(block_mode, key, iv)
-        end
-
-        private
-
-        def encode64(str)
-          Base64.encode64(str).split("\n") * ""
-        end
-
-        def decode64(str)
-          Base64.decode64(str)
-        end
-
-      end
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/encryption/materials.rb

@@ -1,58 +0,0 @@
-require 'base64'
-
-module Aws
-  module S3
-    module Encryption
-      class Materials
-
-        # @option options [required, OpenSSL::PKey::RSA, String] :key
-        #   The master key to use for encrypting/decrypting all objects.
-        #
-        # @option options [String<JSON>] :description ('{}')
-        #   The encryption materials description. This is must be
-        #   a JSON document string.
-        #
-        def initialize(options = {})
-          @key = validate_key(options[:key])
-          @description = validate_desc(options[:description])
-        end
-
-        # @return [OpenSSL::PKey::RSA, String]
-        attr_reader :key
-
-        # @return [String<JSON>]
-        attr_reader :description
-
-        private
-
-        def validate_key(key)
-          case key
-          when OpenSSL::PKey::RSA then key
-          when String
-            if [32, 24, 16].include?(key.bytesize)
-              key
-            else
-              msg = "invalid key, symmetric key required to be 16, 24, or "
-              msg << "32 bytes in length, saw length 31"
-              raise ArgumentError, msg
-            end
-          else
-            msg = "invalid encryption key, expected an OpenSSL::PKey::RSA key "
-            msg << "(for asymmetric encryption) or a String (for symmetric "
-            msg << "encryption)."
-            raise ArgumentError, msg
-          end
-        end
-
-        def validate_desc(description)
-          Json.load(description)
-          description
-        rescue Json::ParseError
-          msg = "expected description to be a valid JSON document string"
-          raise ArgumentError, msg
-        end
-
-      end
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/encryption/utils.rb

@@ -1,79 +0,0 @@
-require 'openssl'
-
-module Aws
-  module S3
-    module Encryption
-      # @api private
-      module Utils
-
-        UNSAFE_MSG = "unsafe encryption, data is longer than key length"
-
-        class << self
-
-          def encrypt(key, data)
-            case key
-            when OpenSSL::PKey::RSA # asymmetric encryption
-              warn(UNSAFE_MSG) if key.public_key.n.num_bits < cipher_size(data)
-              key.public_encrypt(data)
-            when String # symmetric encryption
-              warn(UNSAFE_MSG) if cipher_size(key) < cipher_size(data)
-              cipher = aes_encryption_cipher(:ECB, key)
-              cipher.update(data) + cipher.final
-            end
-          end
-
-          def decrypt(key, data)
-            begin
-              case key
-              when OpenSSL::PKey::RSA # asymmetric decryption
-                key.private_decrypt(data)
-              when String # symmetric Decryption
-                cipher = aes_cipher(:decrypt, :ECB, key, nil)
-                cipher.update(data) + cipher.final
-              end
-            rescue OpenSSL::Cipher::CipherError
-              msg = 'decryption failed, possible incorrect key'
-              raise Errors::DecryptionError, msg
-            end
-          end
-
-          # @param [String] block_mode "CBC" or "ECB"
-          # @param [OpenSSL::PKey::RSA, String, nil] key
-          # @param [String, nil] iv The initialization vector
-          def aes_encryption_cipher(block_mode, key = nil, iv = nil)
-            aes_cipher(:encrypt, block_mode, key, iv)
-          end
-
-          # @param [String] block_mode "CBC" or "ECB"
-          # @param [OpenSSL::PKey::RSA, String, nil] key
-          # @param [String, nil] iv The initialization vector
-          def aes_decryption_cipher(block_mode, key = nil, iv = nil)
-            aes_cipher(:decrypt, block_mode, key, iv)
-          end
-
-          # @param [String] mode "encrypt" or "decrypt"
-          # @param [String] block_mode "CBC" or "ECB"
-          # @param [OpenSSL::PKey::RSA, String, nil] key
-          # @param [String, nil] iv The initialization vector
-          def aes_cipher(mode, block_mode, key, iv)
-            cipher = key ?
-              OpenSSL::Cipher.new("aes-#{cipher_size(key)}-#{block_mode.downcase}") :
-              OpenSSL::Cipher.new("aes-256-#{block_mode.downcase}")
-            cipher.send(mode) # encrypt or decrypt
-            cipher.key = key if key
-            cipher.iv = iv if iv
-            cipher
-          end
-
-          # @param [String] key
-          # @return [Integer]
-          # @raise ArgumentError
-          def cipher_size(key)
-            key.bytesize * 8
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/file_part.rb

@@ -1,75 +0,0 @@
-module Aws
-  module S3
-
-    # A utility class that provides an IO-like interface to a portion of
-    # a file on disk.
-    # @api private
-    class FilePart
-
-      # @option options [required,String,Pathname,File,Tempfile] :source
-      # @option options [required,Integer] :offset The file part will read
-      #   starting at this byte offset.
-      # @option options [required,Integer] :size The maximum number of bytes to
-      #   read from the `:offset`.
-      def initialize(options = {})
-        @source = options[:source]
-        @first_byte = options[:offset]
-        @last_byte = @first_byte + options[:size]
-        @size = options[:size]
-        @file = nil
-      end
-
-      # @return [String,Pathname,File,Tempfile]
-      attr_reader :source
-
-      # @return [Integer]
-      attr_reader :first_byte
-
-      # @return [Integer]
-      attr_reader :last_byte
-
-      # @return [Integer]
-      attr_reader :size
-
-      def read(bytes = nil, output_buffer = nil)
-        open_file unless @file
-        read_from_file(bytes, output_buffer)
-      end
-
-      def rewind
-        if @file
-          @file.seek(@first_byte)
-          @position = @first_byte
-        end
-        0
-      end
-
-      def close
-        @file.close if @file
-      end
-
-      private
-
-      def open_file
-        @file = File.open(@source, 'rb')
-        rewind
-      end
-
-      def read_from_file(bytes, output_buffer)
-        if bytes
-          data = @file.read([remaining_bytes, bytes].min)
-          data = nil if data == ''
-        else
-          data = @file.read(remaining_bytes)
-        end
-        @position += data ? data.bytesize : 0
-        output_buffer ? output_buffer.replace(data || '') : data
-      end
-
-      def remaining_bytes
-        @last_byte - @position
-      end
-
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/file_uploader.rb

@@ -1,58 +0,0 @@
-require 'pathname'
-
-module Aws
-  module S3
-    # @api private
-    class FileUploader
-
-      FIFTEEN_MEGABYTES = 15 * 1024 * 1024
-
-      # @option options [Client] :client
-      # @option options [Integer] :multipart_threshold Files greater than
-      #   `:multipart_threshold` bytes are uploaded using S3 multipart APIs.
-      def initialize(options = {})
-        @options = options
-        @client = options[:client] || Client.new
-        @multipart_threshold = options[:multipart_threshold] || FIFTEEN_MEGABYTES
-      end
-
-      # @return [Client]
-      attr_reader :client
-
-      # @return [Integer] Files larger than this in bytes are uploaded
-      #   using a {MultipartFileUploader}.
-      attr_reader :multipart_threshold
-
-      # @param [String,Pathname,File,Tempfile] source
-      # @option options [required,String] :bucket
-      # @option options [required,String] :key
-      # @return [void]
-      def upload(source, options = {})
-        if File.size(source) >= multipart_threshold
-          MultipartFileUploader.new(@options).upload(source, options)
-        else
-          put_object(source, options)
-        end
-      end
-
-      private
-
-      def put_object(source, options)
-        open_file(source) do |file|
-          @client.put_object(options.merge(body: file))
-        end
-      end
-
-      def open_file(source)
-        if String === source || Pathname === source
-          file = File.open(source, 'rb')
-          yield(file)
-          file.close
-        else
-          yield(source)
-        end
-      end
-
-    end
-  end
-end

data/lib/aws-sdk-resources/services/s3/multipart_file_uploader.rb

@@ -1,187 +0,0 @@
-require 'pathname'
-require 'thread'
-require 'set'
-
-module Aws
-  module S3
-    # @api private
-    class MultipartFileUploader
-
-      MIN_PART_SIZE = 5 * 1024 * 1024 # 5MB
-
-      FILE_TOO_SMALL = "unable to multipart upload files smaller than 5MB"
-
-      MAX_PARTS = 10_000
-
-      THREAD_COUNT = 10
-
-      # @api private
-      CREATE_OPTIONS =
-        Set.new(Client.api.operation(:create_multipart_upload).input.shape.member_names)
-
-      # @api private
-      UPLOAD_PART_OPTIONS =
-        Set.new(Client.api.operation(:upload_part).input.shape.member_names)
-
-      # @option options [Client] :client
-      def initialize(options = {})
-        @client = options[:client] || Client.new
-        @thread_count = options[:thread_count] || THREAD_COUNT
-      end
-
-      # @return [Client]
-      attr_reader :client
-
-      # @param [String,Pathname,File,Tempfile] source
-      # @option options [required,String] :bucket
-      # @option options [required,String] :key
-      # @return [void]
-      def upload(source, options = {})
-        if File.size(source) < MIN_PART_SIZE
-          raise ArgumentError, FILE_TOO_SMALL
-        else
-          upload_id = initiate_upload(options)
-          parts = upload_parts(upload_id, source, options)
-          complete_upload(upload_id, parts, options)
-        end
-      end
-
-      private
-
-      def initiate_upload(options)
-        @client.create_multipart_upload(create_opts(options)).upload_id
-      end
-
-      def complete_upload(upload_id, parts, options)
-        @client.complete_multipart_upload(
-          bucket: options[:bucket],
-          key: options[:key],
-          upload_id: upload_id,
-          multipart_upload: { parts: parts })
-      end
-
-      def upload_parts(upload_id, source, options)
-        pending = PartList.new(compute_parts(upload_id, source, options))
-        completed = PartList.new
-        errors = upload_in_threads(pending, completed)
-        if errors.empty?
-          completed.to_a.sort_by { |part| part[:part_number] }
-        else
-          abort_upload(upload_id, options, errors)
-        end
-      end
-
-      def abort_upload(upload_id, options, errors)
-        @client.abort_multipart_upload(
-          bucket: options[:bucket],
-          key: options[:key],
-          upload_id: upload_id
-        )
-        msg = "multipart upload failed: #{errors.map(&:message).join("; ")}"
-        raise MultipartUploadError.new(msg, errors)
-      rescue MultipartUploadError => error
-        raise error
-      rescue => error
-        msg = "failed to abort multipart upload: #{error.message}"
-        raise MultipartUploadError.new(msg, errors + [error])
-      end
-
-      def compute_parts(upload_id, source, options)
-        size = File.size(source)
-        default_part_size = compute_default_part_size(size)
-        offset = 0
-        part_number = 1
-        parts = []
-        while offset < size
-          parts << upload_part_opts(options).merge({
-            upload_id: upload_id,
-            part_number: part_number,
-            body: FilePart.new(
-              source: source,
-              offset: offset,
-              size: part_size(size, default_part_size, offset)
-            )
-          })
-          part_number += 1
-          offset += default_part_size
-        end
-        parts
-      end
-
-      def create_opts(options)
-        CREATE_OPTIONS.inject({}) do |hash, key|
-          hash[key] = options[key] if options.key?(key)
-          hash
-        end
-      end
-
-      def upload_part_opts(options)
-        UPLOAD_PART_OPTIONS.inject({}) do |hash, key|
-          hash[key] = options[key] if options.key?(key)
-          hash
-        end
-      end
-
-      def upload_in_threads(pending, completed)
-        threads = []
-        @thread_count.times do
-          thread = Thread.new do
-            begin
-              while part = pending.shift
-                resp = @client.upload_part(part)
-                part[:body].close
-                completed.push(etag: resp.etag, part_number: part[:part_number])
-              end
-              nil
-            rescue => error
-              # keep other threads from uploading other parts
-              pending.clear!
-              error
-            end
-          end
-          thread.abort_on_exception = true
-          threads << thread
-        end
-        threads.map(&:value).compact
-      end
-
-      def compute_default_part_size(source_size)
-        [(source_size.to_f / MAX_PARTS).ceil, MIN_PART_SIZE].max.to_i
-      end
-
-      def part_size(total_size, part_size, offset)
-        if offset + part_size > total_size
-          total_size - offset
-        else
-          part_size
-        end
-      end
-
-      # @api private
-      class PartList
-
-        def initialize(parts = [])
-          @parts = parts
-          @mutex = Mutex.new
-        end
-
-        def push(part)
-          @mutex.synchronize { @parts.push(part) }
-        end
-
-        def shift
-          @mutex.synchronize { @parts.shift }
-        end
-
-        def clear!
-          @mutex.synchronize { @parts.clear }
-        end
-
-        def to_a
-          @mutex.synchronize { @parts.dup }
-        end
-
-      end
-    end
-  end
-end