aws-sdk-s3 1.234.0 → 1.236.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: be1c000006646f0cab1ea05164ce65d1f2e6d703317973d2b14a7ace38a38798
-  data.tar.gz: 6bf0586b734763d6b543912eb84cdd52ddc1cc34029ffd27cfb0147038a31790
+  metadata.gz: 977da30326e0ec75cdd7a56efb408b900106b9dfbdd9ac0645375551dfecccaa
+  data.tar.gz: b829179ce40ee29a93b2b366b2607f2cfa6a1cfdb96580657b6238b685c95040
 SHA512:
-  metadata.gz: 17f9c7cd623e705665b425abd6036c76b3ae8090c252a1ced2e01712f0d8c7226bcfbbb370e8d83c61c0bc49a0142ddb4aeeb09a61a269549fc88fbc5eed66ab
-  data.tar.gz: e950e593ed553a5c5c2d33393528164dd46c8f9d4712f50b98a88a3811b968c1f8e153f094ce57e58cc1a03b591252a9d5bd9e3d3c7fae6d957b45f4175f10b4
+  metadata.gz: 2a0ccbc0478fd7441a437ae2de8b93b9b3115e1df80c56ad0a17c9f9e11ab8da89e465287f0e55b5bff639b6070b58290aa01622cd82c15fa98b3dbb45ec9f54
+  data.tar.gz: ec282ef84b7c70f7f374af7611f2ef2ee016a809bc4a6d046a9e766f362fcd5a85725cec33c709041527ad93a888ff6b060f8be0bcaabf052a47c728e44b9361

data/CHANGELOG.md

@@ -1,6 +1,22 @@
 Unreleased Changes
 ------------------
 
+1.236.0 (2026-10-28)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+* Issue - Create and cache S3 Express sessions using the credentials of the requesting client.
+
+1.235.0 (2026-10-20)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+* Feature - Add RBS signatures for `TransferManager`, `MultipartUploadError`, `Errors::NotFound` and `Errors::SlowDown`.
+
+* Issue - Improve object key validation in `TransferManager#download_directory` on Windows.
+
 1.234.0 (2026-10-19)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.234.0
+1.236.0

data/lib/aws-sdk-s3/client.rb

@@ -255,13 +255,20 @@ module Aws::S3
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
-    #     a clock skew correction and retry requests with skewed client clocks.
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether
+    #     to apply a clock skew correction and retry requests with skewed client
+    #     clocks. Takes effect only when `disable_clock_skew_correction` is not set.
     #
     #   @option options [String] :defaults_mode ("legacy")
     #     See {Aws::DefaultsModeConfiguration} for a list of the
     #     accepted modes and the configuration defaults that are included.
     #
+    #   @option options [Boolean] :disable_clock_skew_correction
+    #     Used only in `standard` and `adaptive` retry modes. When `true`, the
+    #     SDK does not apply a clock skew correction, does not update its stored
+    #     skew from responses, and does not retry clock skew errors. Clock skew
+    #     correction is enabled by default.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
@@ -24209,7 +24216,7 @@ module Aws::S3
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-s3'
-      context[:gem_version] = '1.234.0'
+      context[:gem_version] = '1.236.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-s3/directory_downloader.rb

@@ -209,7 +209,12 @@ module Aws
         end
 
         def validate_key(key)
-          segments = key.split('/')
+          validation_key = key
+          if File::ALT_SEPARATOR
+            validation_key = key.gsub(File::ALT_SEPARATOR, File::SEPARATOR)
+          end
+
+          segments = validation_key.split(File::SEPARATOR)
           return unless segments.any? { |s| %w[. ..].include?(s) }
 
           DirectoryDownloadError.new("invalid key '#{key}': contains '.' or '..' path segments")

data/lib/aws-sdk-s3/express_credentials.rb

@@ -14,6 +14,7 @@ module Aws
 
       def initialize(options = {})
         @client = options[:client]
+        @base_credentials = options[:base_credentials]
         @create_session_params = {}
         options.each_pair do |key, value|
           if self.class.create_session_options.include?(key)
@@ -30,7 +31,9 @@ module Aws
       private
 
       def refresh
-        c = @client.create_session(@create_session_params).credentials
+        request = @client.build_request(:create_session, @create_session_params)
+        request.context[:sigv4_credentials] = @base_credentials if @base_credentials
+        c = request.send_request.credentials
         @credentials = Credentials.new(
           c.access_key_id,
           c.secret_access_key,

data/lib/aws-sdk-s3/express_credentials_provider.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'securerandom'
+
 module Aws
   module S3
     # @api private
@@ -10,9 +12,12 @@ module Aws
     # Returns Credentials class for S3 Express. Accepts CreateSession
     # params as options. See {Client#create_session} for details.
     class ExpressCredentialsProvider
+      CACHE_KEY_SECRET = SecureRandom.random_bytes(64)
+      private_constant :CACHE_KEY_SECRET
+
       # @param [Hash] options
       # @option options [Client] :client The S3 client used to create the
-      #  session.
+      #  session when one is not given to {#express_credentials_for}.
       # @option options [String] :session_mode (see: {Client#create_session})
       # @option options [Boolean] :caching (true) When true, credentials will
       #  be cached.
@@ -27,11 +32,12 @@ module Aws
         @cache = Aws::S3.express_credentials_cache
       end
 
-      def express_credentials_for(bucket)
+      def express_credentials_for(bucket, client = @client)
+        credentials = client.config.credentials&.credentials
         if @caching
-          cached_credentials_for(bucket)
+          cached_credentials_for(bucket, client, credentials)
         else
-          new_credentials_for(bucket)
+          new_credentials_for(bucket, client, credentials)
         end
       end
 
@@ -39,18 +45,23 @@ module Aws
 
       private
 
-      def cached_credentials_for(bucket)
-        if @cache.key?(bucket)
-          @cache[bucket]
-        else
-          @cache[bucket] = new_credentials_for(bucket)
-        end
+      def cached_credentials_for(bucket, client, credentials)
+        @cache[cache_key(bucket, credentials)] ||= new_credentials_for(bucket, client, credentials)
+      end
+
+      def cache_key(bucket, credentials)
+        identity = "#{credentials&.access_key_id}#{credentials&.secret_access_key}"
+        "#{OpenSSL::HMAC.hexdigest('SHA256', CACHE_KEY_SECRET, identity)}#{bucket}"
       end
 
-      def new_credentials_for(bucket)
+      def new_credentials_for(bucket, client, credentials)
+        # Sign with this snapshot, but report the provider's UserAgent metrics.
+        credentials = credentials&.dup
+        credentials&.metrics = client.config.credentials.metrics
         ExpressCredentials.new(
           bucket: bucket,
-          client: @client,
+          client: client,
+          base_credentials: credentials,
           **@options
         )
       end

data/lib/aws-sdk-s3/multipart_upload_error.rb

@@ -10,7 +10,7 @@ module Aws
         super(message)
       end
 
-      # @return [Array<StandardError>] The list of errors encountered when uploading or aborting the upload.
+      # @return [Array<Exception>] The list of errors encountered when uploading or aborting the upload.
       attr_reader :errors
     end
   end

data/lib/aws-sdk-s3/plugins/express_session_auth.rb

@@ -35,8 +35,7 @@ for different buckets.
             if context[:auth_scheme]['name'] == 'sigv4-s3express' &&
                !context.config.disable_s3_express_session_auth
               bucket = context.params[:bucket]
-              credentials_provider = context.config.express_credentials_provider
-              credentials = credentials_provider.express_credentials_for(bucket)
+              credentials = express_credentials_for(context, bucket)
               context[:sigv4_credentials] = credentials # Sign will use this
             end
 
@@ -45,6 +44,15 @@ for different buckets.
 
           private
 
+          def express_credentials_for(context, bucket)
+            provider = context.config.express_credentials_provider
+            if provider.is_a?(ExpressCredentialsProvider)
+              provider.express_credentials_for(bucket, context.client)
+            else
+              provider.express_credentials_for(bucket)
+            end
+          end
+
           def with_metric(credentials, &block)
             return block.call unless credentials
 

data/lib/aws-sdk-s3.rb

@@ -75,7 +75,7 @@ module Aws::S3
   autoload :ObjectVersion, 'aws-sdk-s3/object_version'
   autoload :EventStreams, 'aws-sdk-s3/event_streams'
 
-  GEM_VERSION = '1.234.0'
+  GEM_VERSION = '1.236.0'
 
 end
 

data/sig/client.rbs

@@ -30,6 +30,7 @@ module Aws
                       ?convert_params: bool,
                       ?correct_clock_skew: bool,
                       ?defaults_mode: String,
+                      ?disable_clock_skew_correction: bool,
                       ?disable_host_prefix_injection: bool,
                       ?disable_request_compression: bool,
                       ?disable_s3_express_session_auth: bool,

data/sig/customizations/errors.rbs

@@ -0,0 +1,17 @@
+module Aws
+  module S3
+    module Errors
+      # Not modeled in the API. Defined at runtime by Aws::Errors::DynamicErrors.
+
+      # Raised for a 404 response without an error body (e.g. HEAD requests).
+      # https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadObject.html
+      class NotFound < ServiceError
+      end
+
+      # Raised when S3 returns a 503 Slow Down response because the request rate is too high.
+      # https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ErrorCodeList
+      class SlowDown < ServiceError
+      end
+    end
+  end
+end

data/sig/multipart_upload_error.rbs

@@ -0,0 +1,9 @@
+module Aws
+  module S3
+    class MultipartUploadError < StandardError
+      def initialize: (String message, ?Array[Exception] errors) -> void
+
+      attr_reader errors: Array[Exception]
+    end
+  end
+end

data/sig/resource.rbs

@@ -30,6 +30,7 @@ module Aws
                         ?convert_params: bool,
                         ?correct_clock_skew: bool,
                         ?defaults_mode: String,
+                        ?disable_clock_skew_correction: bool,
                         ?disable_host_prefix_injection: bool,
                         ?disable_request_compression: bool,
                         ?disable_s3_express_session_auth: bool,

data/sig/transfer_manager.rbs

@@ -0,0 +1,31 @@
+module Aws
+  module S3
+    class TransferManager
+      type download_result = { completed_downloads: Integer, failed_downloads: Integer, ?errors: Array[StandardError] }
+      type upload_result = { completed_uploads: Integer, failed_uploads: Integer, ?errors: Array[StandardError] }
+      type upload_response = Client::_PutObjectResponseSuccess | Client::_CompleteMultipartUploadResponseSuccess
+
+      def initialize: (?client: Client, ?executor: untyped, ?logger: untyped) -> void
+
+      attr_reader client: Client
+      attr_reader executor: untyped
+      attr_reader logger: untyped
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/TransferManager.html#download_directory-instance_method
+      def download_directory: (String destination, bucket: String, **untyped options) -> download_result
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/TransferManager.html#download_file-instance_method
+      def download_file: (untyped destination, bucket: String, key: String, **untyped options) -> true
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/TransferManager.html#upload_directory-instance_method
+      def upload_directory: (String | Pathname source, bucket: String, **untyped options) -> upload_result
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/TransferManager.html#upload_file-instance_method
+      def upload_file: (untyped source, bucket: String, key: String, **untyped options)
+                       ?{ (upload_response response) -> void } -> true
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/S3/TransferManager.html#upload_stream-instance_method
+      def upload_stream: (bucket: String, key: String, **untyped options) { (IO write_stream) -> void } -> true
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-s3
 version: !ruby/object:Gem::Version
-  version: 1.234.0
+  version: 1.236.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -46,7 +46,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.262.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -56,7 +56,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.262.0
 description: Official AWS Ruby gem for Amazon Simple Storage Service (Amazon S3).
   This gem is part of the AWS SDK for Ruby.
 email:
@@ -208,10 +208,12 @@ files:
 - sig/bucket_website.rbs
 - sig/client.rbs
 - sig/customizations/bucket.rbs
+- sig/customizations/errors.rbs
 - sig/customizations/object.rbs
 - sig/customizations/object_summary.rbs
 - sig/errors.rbs
 - sig/multipart_upload.rbs
+- sig/multipart_upload_error.rbs
 - sig/multipart_upload_part.rbs
 - sig/object.rbs
 - sig/object_acl.rbs
@@ -219,6 +221,7 @@ files:
 - sig/object_version.rbs
 - sig/params.rbs
 - sig/resource.rbs
+- sig/transfer_manager.rbs
 - sig/types.rbs
 - sig/waiters.rbs
 homepage: https://github.com/aws/aws-sdk-ruby