aws-sdk-s3 1.235.0 → 1.236.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 222ecc56a1d529e21a3539d72a6065fa8b03a30f2a76cefe2b656464c003b094
-  data.tar.gz: bdb9c728982988008448f8fac5b571277b16896fc36521c678a8ddd48fe89053
+  metadata.gz: 977da30326e0ec75cdd7a56efb408b900106b9dfbdd9ac0645375551dfecccaa
+  data.tar.gz: b829179ce40ee29a93b2b366b2607f2cfa6a1cfdb96580657b6238b685c95040
 SHA512:
-  metadata.gz: 7cfb285fdbcbb3fc493209736b5432a034b45fa4b0ce2f0ba14a16f18815e7519a04ade3c04072eb7218781974f323acf0ea5ee4e4a0df298f4e3c61a514240b
-  data.tar.gz: f385fab3dd0f2eb170755d3d8696db98d054dfbd346d56c3a940ee0fd366a802cbbd30a78dca6e9b9b179d13937831d8eb5fb645124a57738c067fbcbc3dcd76
+  metadata.gz: 2a0ccbc0478fd7441a437ae2de8b93b9b3115e1df80c56ad0a17c9f9e11ab8da89e465287f0e55b5bff639b6070b58290aa01622cd82c15fa98b3dbb45ec9f54
+  data.tar.gz: ec282ef84b7c70f7f374af7611f2ef2ee016a809bc4a6d046a9e766f362fcd5a85725cec33c709041527ad93a888ff6b060f8be0bcaabf052a47c728e44b9361

data/CHANGELOG.md

@@ -1,6 +1,13 @@
 Unreleased Changes
 ------------------
 
+1.236.0 (2026-10-28)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+* Issue - Create and cache S3 Express sessions using the credentials of the requesting client.
+
 1.235.0 (2026-10-20)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.235.0
+1.236.0

data/lib/aws-sdk-s3/client.rb

@@ -24216,7 +24216,7 @@ module Aws::S3
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-s3'
-      context[:gem_version] = '1.235.0'
+      context[:gem_version] = '1.236.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-s3/express_credentials.rb

@@ -14,6 +14,7 @@ module Aws
 
       def initialize(options = {})
         @client = options[:client]
+        @base_credentials = options[:base_credentials]
         @create_session_params = {}
         options.each_pair do |key, value|
           if self.class.create_session_options.include?(key)
@@ -30,7 +31,9 @@ module Aws
       private
 
       def refresh
-        c = @client.create_session(@create_session_params).credentials
+        request = @client.build_request(:create_session, @create_session_params)
+        request.context[:sigv4_credentials] = @base_credentials if @base_credentials
+        c = request.send_request.credentials
         @credentials = Credentials.new(
           c.access_key_id,
           c.secret_access_key,

data/lib/aws-sdk-s3/express_credentials_provider.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'securerandom'
+
 module Aws
   module S3
     # @api private
@@ -10,9 +12,12 @@ module Aws
     # Returns Credentials class for S3 Express. Accepts CreateSession
     # params as options. See {Client#create_session} for details.
     class ExpressCredentialsProvider
+      CACHE_KEY_SECRET = SecureRandom.random_bytes(64)
+      private_constant :CACHE_KEY_SECRET
+
       # @param [Hash] options
       # @option options [Client] :client The S3 client used to create the
-      #  session.
+      #  session when one is not given to {#express_credentials_for}.
       # @option options [String] :session_mode (see: {Client#create_session})
       # @option options [Boolean] :caching (true) When true, credentials will
       #  be cached.
@@ -27,11 +32,12 @@ module Aws
         @cache = Aws::S3.express_credentials_cache
       end
 
-      def express_credentials_for(bucket)
+      def express_credentials_for(bucket, client = @client)
+        credentials = client.config.credentials&.credentials
         if @caching
-          cached_credentials_for(bucket)
+          cached_credentials_for(bucket, client, credentials)
         else
-          new_credentials_for(bucket)
+          new_credentials_for(bucket, client, credentials)
         end
       end
 
@@ -39,18 +45,23 @@ module Aws
 
       private
 
-      def cached_credentials_for(bucket)
-        if @cache.key?(bucket)
-          @cache[bucket]
-        else
-          @cache[bucket] = new_credentials_for(bucket)
-        end
+      def cached_credentials_for(bucket, client, credentials)
+        @cache[cache_key(bucket, credentials)] ||= new_credentials_for(bucket, client, credentials)
+      end
+
+      def cache_key(bucket, credentials)
+        identity = "#{credentials&.access_key_id}#{credentials&.secret_access_key}"
+        "#{OpenSSL::HMAC.hexdigest('SHA256', CACHE_KEY_SECRET, identity)}#{bucket}"
       end
 
-      def new_credentials_for(bucket)
+      def new_credentials_for(bucket, client, credentials)
+        # Sign with this snapshot, but report the provider's UserAgent metrics.
+        credentials = credentials&.dup
+        credentials&.metrics = client.config.credentials.metrics
         ExpressCredentials.new(
           bucket: bucket,
-          client: @client,
+          client: client,
+          base_credentials: credentials,
           **@options
         )
       end

data/lib/aws-sdk-s3/plugins/express_session_auth.rb

@@ -35,8 +35,7 @@ for different buckets.
             if context[:auth_scheme]['name'] == 'sigv4-s3express' &&
                !context.config.disable_s3_express_session_auth
               bucket = context.params[:bucket]
-              credentials_provider = context.config.express_credentials_provider
-              credentials = credentials_provider.express_credentials_for(bucket)
+              credentials = express_credentials_for(context, bucket)
               context[:sigv4_credentials] = credentials # Sign will use this
             end
 
@@ -45,6 +44,15 @@ for different buckets.
 
           private
 
+          def express_credentials_for(context, bucket)
+            provider = context.config.express_credentials_provider
+            if provider.is_a?(ExpressCredentialsProvider)
+              provider.express_credentials_for(bucket, context.client)
+            else
+              provider.express_credentials_for(bucket)
+            end
+          end
+
           def with_metric(credentials, &block)
             return block.call unless credentials
 

data/lib/aws-sdk-s3.rb

@@ -75,7 +75,7 @@ module Aws::S3
   autoload :ObjectVersion, 'aws-sdk-s3/object_version'
   autoload :EventStreams, 'aws-sdk-s3/event_streams'
 
-  GEM_VERSION = '1.235.0'
+  GEM_VERSION = '1.236.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-s3
 version: !ruby/object:Gem::Version
-  version: 1.235.0
+  version: 1.236.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -46,7 +46,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.262.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -56,7 +56,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.258.0
+        version: 3.262.0
 description: Official AWS Ruby gem for Amazon Simple Storage Service (Amazon S3).
   This gem is part of the AWS SDK for Ruby.
 email: