aws-sdk-s3control 1.114.0 → 1.116.0

data/lib/aws-sdk-s3control/client.rb

@@ -101,8 +101,8 @@ module Aws::S3Control
     #     class name or an instance of a plugin class.
     #
     #   @option options [required, Aws::CredentialProvider] :credentials
-    #     Your AWS credentials used for authentication. This can be an instance of any one of the
-    #     following classes:
+    #     Your AWS credentials used for authentication. This can be any class that includes and implements
+    #     `Aws::CredentialProvider`, or instance of any one of the following classes:
     #
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
     #       credentials.
@@ -130,8 +130,7 @@ module Aws::S3Control
     #     * `Aws::CognitoIdentityCredentials` - Used for loading credentials
     #       from the Cognito Identity service.
     #
-    #     When `:credentials` are not configured directly, the following
-    #     locations will be searched for credentials:
+    #     When `:credentials` are not configured directly, the following locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
     #
@@ -145,12 +144,10 @@ module Aws::S3Control
     #
     #     * `~/.aws/config`
     #
-    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
-    #       are very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
-    #       enable retries and extended timeouts. Instance profile credential
-    #       fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
-    #       to `true`.
+    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts are very aggressive.
+    #       Construct and pass an instance of `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
+    #       enable retries and extended timeouts. Instance profile credential fetching can be disabled by
+    #       setting `ENV['AWS_EC2_METADATA_DISABLED']` to `true`.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -389,8 +386,8 @@ module Aws::S3Control
     #     `Aws::Telemetry::OTelProvider` for telemetry provider.
     #
     #   @option options [Aws::TokenProvider] :token_provider
-    #     Your Bearer token used for authentication. This can be an instance of any one of the
-    #     following classes:
+    #     Your Bearer token used for authentication. This can be any class that includes and implements
+    #     `Aws::TokenProvider`, or instance of any one of the following classes:
     #
     #     * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
     #       tokens.
@@ -509,6 +506,10 @@ module Aws::S3Control
     #   `sso:CreateApplication`, `sso:PutApplicationGrant`, and
     #   `sso:PutApplicationAuthenticationMethod`.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -564,6 +565,10 @@ module Aws::S3Control
     #
     #   For directory groups - `identitystore:DescribeGroup`
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsInstance.html
@@ -696,6 +701,10 @@ module Aws::S3Control
     #   `sso:CreateApplication`, `sso:PutApplicationGrant`, and
     #   `sso:PutApplicationAuthenticationMethod` permissions.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -785,6 +794,10 @@ module Aws::S3Control
     # : You must also have the following permission for the specified IAM
     #   role: `iam:PassRole`
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html
@@ -891,6 +904,10 @@ module Aws::S3Control
     #
     # * [ListAccessPointsForDirectoryBuckets][9]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html
@@ -982,6 +999,14 @@ module Aws::S3Control
     #   S3][1]. For information about tagging access points, see [Using tags
     #   for attribute-based access control (ABAC)][2].
     #
+    #   <note markdown="1"> * You must have the `s3:TagResource` permission to create an access
+    #     point with tags for a general purpose bucket.
+    #
+    #   * You must have the `s3express:TagResource` permission to create an
+    #     access point with tags for a directory bucket.
+    #
+    #    </note>
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html
@@ -1051,6 +1076,10 @@ module Aws::S3Control
     #
     # * [ListAccessPointsForObjectLambda][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/transforming-objects.html
@@ -1296,6 +1325,10 @@ module Aws::S3Control
     #
     # * [JobOperation][7]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html
@@ -1473,6 +1506,10 @@ module Aws::S3Control
     #       },
     #       s3_replicate_object: {
     #       },
+    #       s3_compute_object_checksum: {
+    #         checksum_algorithm: "CRC32", # accepts CRC32, CRC32C, CRC64NVME, MD5, SHA1, SHA256
+    #         checksum_type: "FULL_OBJECT", # accepts FULL_OBJECT, COMPOSITE
+    #       },
     #     },
     #     report: { # required
     #       bucket: "S3BucketArnString",
@@ -1480,6 +1517,7 @@ module Aws::S3Control
     #       enabled: false, # required
     #       prefix: "ReportPrefixString",
     #       report_scope: "AllTasks", # accepts AllTasks, FailedTasksOnly
+    #       expected_bucket_owner: "AccountId",
     #     },
     #     client_request_token: "NonEmptyMaxLength64String", # required
     #     manifest: {
@@ -1580,6 +1618,10 @@ module Aws::S3Control
     #
     # * [ListMultiRegionAccessPoints][6]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/CreatingMultiRegionAccessPoints.html
@@ -1662,6 +1704,10 @@ module Aws::S3Control
     # For information about Storage Lens groups errors, see [List of Amazon
     # S3 Storage Lens error codes][3].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups-overview.html
@@ -1769,6 +1815,10 @@ module Aws::S3Control
     # : You must have the `s3:DeleteAccessGrant` permission to use this
     #   operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -1809,6 +1859,10 @@ module Aws::S3Control
     # : You must have the `s3:DeleteAccessGrantsInstance` permission to use
     #   this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html
@@ -1846,6 +1900,10 @@ module Aws::S3Control
     # : You must have the `s3:DeleteAccessGrantsInstanceResourcePolicy`
     #   permission to use this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -1878,6 +1936,10 @@ module Aws::S3Control
     # : You must have the `s3:DeleteAccessGrantsLocation` permission to use
     #   this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html
@@ -1928,6 +1990,10 @@ module Aws::S3Control
     #
     # * [ListAccessPoints][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html#API_control_DeleteAccessPoint_Examples
@@ -1988,6 +2054,10 @@ module Aws::S3Control
     #
     # * [ListAccessPointsForObjectLambda][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html
@@ -2037,6 +2107,10 @@ module Aws::S3Control
     #
     # * [GetAccessPointPolicy][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html#API_control_DeleteAccessPointPolicy_Examples
@@ -2093,6 +2167,10 @@ module Aws::S3Control
     #
     # * [PutAccessPointPolicyForObjectLambda][2]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html
@@ -2136,6 +2214,10 @@ module Aws::S3Control
     #
     # For information about REST API errors, see [REST error responses][1].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#RESTErrorResponses
@@ -2273,6 +2355,10 @@ module Aws::S3Control
     #
     # * [GetBucketLifecycleConfiguration][6]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketLifecycle.html
@@ -2361,6 +2447,10 @@ module Aws::S3Control
     #
     # * [PutBucketPolicy][6]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html
@@ -2451,6 +2541,10 @@ module Aws::S3Control
     #
     # * [GetBucketReplication][7]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketReplication.html
@@ -2527,6 +2621,10 @@ module Aws::S3Control
     #
     # * [PutBucketTagging][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketTagging.html
@@ -2590,6 +2688,10 @@ module Aws::S3Control
     #
     # * [PutJobTagging][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/batch-ops-managing-jobs.html#batch-ops-job-tags
@@ -2650,6 +2752,10 @@ module Aws::S3Control
     #
     # * [ListMultiRegionAccessPoints][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -2714,6 +2820,10 @@ module Aws::S3Control
     #
     # * [PutPublicAccessBlock][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html
@@ -2756,6 +2866,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -2801,6 +2915,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -2840,6 +2958,10 @@ module Aws::S3Control
     # For information about Storage Lens groups errors, see [List of Amazon
     # S3 Storage Lens error codes][2].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
@@ -2889,6 +3011,10 @@ module Aws::S3Control
     #
     # * [UpdateJobStatus][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html
@@ -2984,6 +3110,8 @@ module Aws::S3Control
     #   resp.job.operation.s3_put_object_retention.bypass_governance_retention #=> Boolean
     #   resp.job.operation.s3_put_object_retention.retention.retain_until_date #=> Time
     #   resp.job.operation.s3_put_object_retention.retention.mode #=> String, one of "COMPLIANCE", "GOVERNANCE"
+    #   resp.job.operation.s3_compute_object_checksum.checksum_algorithm #=> String, one of "CRC32", "CRC32C", "CRC64NVME", "MD5", "SHA1", "SHA256"
+    #   resp.job.operation.s3_compute_object_checksum.checksum_type #=> String, one of "FULL_OBJECT", "COMPOSITE"
     #   resp.job.priority #=> Integer
     #   resp.job.progress_summary.total_number_of_tasks #=> Integer
     #   resp.job.progress_summary.number_of_tasks_succeeded #=> Integer
@@ -2998,6 +3126,7 @@ module Aws::S3Control
     #   resp.job.report.enabled #=> Boolean
     #   resp.job.report.prefix #=> String
     #   resp.job.report.report_scope #=> String, one of "AllTasks", "FailedTasksOnly"
+    #   resp.job.report.expected_bucket_owner #=> String
     #   resp.job.creation_time #=> Time
     #   resp.job.termination_date #=> Time
     #   resp.job.role_arn #=> String
@@ -3059,6 +3188,10 @@ module Aws::S3Control
     #
     # * [ListMultiRegionAccessPoints][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MrapOperations.html
@@ -3135,6 +3268,10 @@ module Aws::S3Control
     # : You must have the `sso:DeleteApplication` permission to use this
     #   operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -3163,6 +3300,10 @@ module Aws::S3Control
     # : You must have the `s3:GetAccessGrant` permission to use this
     #   operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -3224,6 +3365,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -3274,6 +3419,10 @@ module Aws::S3Control
     #   their S3 Access Grants instance:
     #   `s3:GetAccessGrantsInstanceForPrefix`.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The ID of the Amazon Web Services account that is making this request.
     #
@@ -3313,6 +3462,10 @@ module Aws::S3Control
     # : You must have the `s3:GetAccessGrantsInstanceResourcePolicy`
     #   permission to use this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -3351,6 +3504,10 @@ module Aws::S3Control
     # : You must have the `s3:GetAccessGrantsLocation` permission to use
     #   this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -3412,6 +3569,10 @@ module Aws::S3Control
     #
     # * [ListAccessPoints][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html#API_control_GetAccessPoint_Examples
@@ -3503,6 +3664,10 @@ module Aws::S3Control
     #
     # ^
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointConfigurationForObjectLambda.html
@@ -3562,6 +3727,10 @@ module Aws::S3Control
     #
     # * [ListAccessPointsForObjectLambda][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html
@@ -3618,6 +3787,10 @@ module Aws::S3Control
     #
     # * [DeleteAccessPointPolicy][2]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html
@@ -3679,6 +3852,10 @@ module Aws::S3Control
     #
     # * [PutAccessPointPolicyForObjectLambda][2]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicyForObjectLambda.html
@@ -3724,6 +3901,10 @@ module Aws::S3Control
     # through access points, see [Managing Data Access with Amazon S3 access
     # points][1] in the *Amazon S3 User Guide*.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html
@@ -3765,6 +3946,10 @@ module Aws::S3Control
     # Returns the status of the resource policy associated with an Object
     # Lambda Access Point.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The account ID for the account that owns the specified Object Lambda
     #   Access Point.
@@ -3803,6 +3988,10 @@ module Aws::S3Control
     #
     # For information about REST API errors, see [REST error responses][1].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#RESTErrorResponses
@@ -3873,6 +4062,10 @@ module Aws::S3Control
     #
     # * [DeleteBucket][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html
@@ -3971,6 +4164,10 @@ module Aws::S3Control
     #
     # * [DeleteBucketLifecycleConfiguration][8]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html
@@ -4096,6 +4293,10 @@ module Aws::S3Control
     #
     # * [DeleteBucketPolicy][7]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html
@@ -4461,6 +4662,10 @@ module Aws::S3Control
     #   `sts:SetContext`, and for IAM users or roles
     #   `sts:SetSourceIdentity`.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/STS/latest/APIReference/API_Credentials.html
@@ -4561,6 +4766,10 @@ module Aws::S3Control
     #
     # * [DeleteJobTagging][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/batch-ops-managing-jobs.html#batch-ops-job-tags
@@ -4624,6 +4833,10 @@ module Aws::S3Control
     #
     # * [ListMultiRegionAccessPoints][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -4702,6 +4915,10 @@ module Aws::S3Control
     #
     # * [PutMultiRegionAccessPointPolicy][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -4767,6 +4984,10 @@ module Aws::S3Control
     #
     # * [PutMultiRegionAccessPointPolicy][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -4833,6 +5054,10 @@ module Aws::S3Control
     #
     # * `eu-west-1`
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID for the owner of the Multi-Region
     #   Access Point.
@@ -4883,6 +5108,10 @@ module Aws::S3Control
     #
     # * [PutPublicAccessBlock][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html
@@ -4936,6 +5165,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -5022,6 +5255,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -5069,6 +5306,10 @@ module Aws::S3Control
     # For information about Storage Lens groups errors, see [List of Amazon
     # S3 Storage Lens error codes][2].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
@@ -5147,6 +5388,10 @@ module Aws::S3Control
     # : You must have the `s3:ListAccessGrants` permission to use this
     #   operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -5259,6 +5504,10 @@ module Aws::S3Control
     # : You must have the `s3:ListAccessGrantsInstances` permission to use
     #   this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -5316,6 +5565,10 @@ module Aws::S3Control
     # : You must have the `s3:ListAccessGrantsLocations` permission to use
     #   this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -5406,6 +5659,10 @@ module Aws::S3Control
     #
     # * [GetAccessPoint][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html#API_control_GetAccessPoint_Examples
@@ -5507,6 +5764,10 @@ module Aws::S3Control
     #
     # For information about REST API errors, see [REST error responses][2].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPoints.html
@@ -5591,6 +5852,10 @@ module Aws::S3Control
     #
     # * [GetAccessPointForObjectLambda][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html
@@ -5666,6 +5931,10 @@ module Aws::S3Control
     # : You must have the `s3:ListCallerAccessGrants` permission to use this
     #   operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-list-grants.html
@@ -5752,6 +6021,10 @@ module Aws::S3Control
     #
     # * [UpdateJobStatus][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html
@@ -5801,7 +6074,7 @@ module Aws::S3Control
     #   resp.jobs #=> Array
     #   resp.jobs[0].job_id #=> String
     #   resp.jobs[0].description #=> String
-    #   resp.jobs[0].operation #=> String, one of "LambdaInvoke", "S3PutObjectCopy", "S3PutObjectAcl", "S3PutObjectTagging", "S3DeleteObjectTagging", "S3InitiateRestoreObject", "S3PutObjectLegalHold", "S3PutObjectRetention", "S3ReplicateObject"
+    #   resp.jobs[0].operation #=> String, one of "LambdaInvoke", "S3PutObjectCopy", "S3PutObjectAcl", "S3PutObjectTagging", "S3DeleteObjectTagging", "S3InitiateRestoreObject", "S3PutObjectLegalHold", "S3PutObjectRetention", "S3ReplicateObject", "S3ComputeObjectChecksum"
     #   resp.jobs[0].priority #=> Integer
     #   resp.jobs[0].status #=> String, one of "Active", "Cancelled", "Cancelling", "Complete", "Completing", "Failed", "Failing", "New", "Paused", "Pausing", "Preparing", "Ready", "Suspended"
     #   resp.jobs[0].creation_time #=> Time
@@ -5845,6 +6118,10 @@ module Aws::S3Control
     #
     # * [GetMultiRegionAccessPoint][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -5916,6 +6193,10 @@ module Aws::S3Control
     # uses the S3 on Outposts endpoint hostname prefix and
     # `x-amz-outpost-id` in your request, see the [Examples][2] section.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html
@@ -5986,6 +6267,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -6039,6 +6324,10 @@ module Aws::S3Control
     # For information about Storage Lens groups errors, see [List of Amazon
     # S3 Storage Lens error codes][2].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
@@ -6089,11 +6378,15 @@ module Aws::S3Control
     # <note markdown="1"> This operation is only supported for the following Amazon S3
     # resources:
     #
-    #  * [Directory buckets][1]
+    #  * [Access Points for directory buckets][1]
+    #
+    # * [Access Points for general purpose buckets][2]
     #
-    # * [Storage Lens groups][2]
+    # * [Directory buckets][3]
     #
-    # * [S3 Access Grants instances, registered locations, and grants][3].
+    # * [Storage Lens groups][4]
+    #
+    # * [S3 Access Grants instances, registered locations, and grants][5].
     #
     #  </note>
     #
@@ -6104,15 +6397,15 @@ module Aws::S3Control
     #
     #   For more information about the required Storage Lens Groups
     #   permissions, see [Setting account permissions to use S3 Storage Lens
-    #   groups][4].
+    #   groups][6].
     #
     # Directory bucket permissions
     #
-    # : For directory buckets, you must have the
-    #   `s3express:ListTagsForResource` permission to use this operation.
-    #   For more information about directory buckets policies and
+    # : For directory buckets and access points for directory buckets, you
+    #   must have the `s3express:ListTagsForResource` permission to use this
+    #   operation. For more information about directory buckets policies and
     #   permissions, see [Identity and Access Management (IAM) for S3
-    #   Express One Zone][5] in the *Amazon S3 User Guide*.
+    #   Express One Zone][7] in the *Amazon S3 User Guide*.
     #
     # HTTP Host header syntax
     #
@@ -6120,16 +6413,22 @@ module Aws::S3Control
     #   `s3express-control.region.amazonaws.com`.
     #
     # For information about S3 Tagging errors, see [List of Amazon S3
-    # Tagging error codes][6].
+    # Tagging error codes][8].
+    #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
-    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
-    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
-    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
-    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
-    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html
+    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html
+    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
+    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
+    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
+    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
+    # [7]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
+    # [8]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
     #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the resource owner.
@@ -6173,6 +6472,10 @@ module Aws::S3Control
     # : You must have the `s3:PutAccessGrantsInstanceResourcePolicy`
     #   permission to use this operation.
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -6226,6 +6529,10 @@ module Aws::S3Control
     #
     # ^
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointConfigurationForObjectLambda.html
@@ -6295,6 +6602,10 @@ module Aws::S3Control
     #
     # * [DeleteAccessPointPolicy][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html#API_control_PutAccessPointPolicy_Examples
@@ -6368,6 +6679,10 @@ module Aws::S3Control
     #
     # * [GetAccessPointPolicyForObjectLambda][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/olap-create.html#olap-create-cli
@@ -6417,6 +6732,10 @@ module Aws::S3Control
     #
     # For information about REST API errors, see [REST error responses][1].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#RESTErrorResponses
@@ -7068,6 +7387,10 @@ module Aws::S3Control
     #
     # * [GetBucketLifecycleConfiguration][7]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketVersioning.html
@@ -7166,6 +7489,10 @@ module Aws::S3Control
     #
     # * [DeleteJobTagging][4]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetJobTagging.html
@@ -7230,6 +7557,10 @@ module Aws::S3Control
     #
     # * [GetMultiRegionAccessPointPolicyStatus][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRestrictions.html
@@ -7294,6 +7625,10 @@ module Aws::S3Control
     #
     # * [DeletePublicAccessBlock][3]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html
@@ -7348,6 +7683,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -7489,6 +7828,10 @@ module Aws::S3Control
     #
     #  </note>
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/storage_lens.html
@@ -7568,6 +7911,10 @@ module Aws::S3Control
     #
     # * `eu-west-1`
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID for the owner of the Multi-Region
     #   Access Point.
@@ -7613,11 +7960,25 @@ module Aws::S3Control
     #
     # <note markdown="1"> This operation is only supported for the following Amazon S3 resource:
     #
-    #  * [Directory buckets][1]
+    #  * [Access Points for directory buckets][1]
+    #
+    # * [Access Points for general purpose buckets][2]
     #
-    # * [S3 Storage Lens groups][2]
+    # * [Directory buckets][3]
     #
-    # * [S3 Access Grants instances, registered locations, or grants][3].
+    # * [S3 Storage Lens groups][4]
+    #
+    # * [S3 Access Grants instances, registered locations, or grants][5].
+    #
+    #  </note>
+    #
+    # <note markdown="1"> This operation is only supported for the following Amazon S3 resource:
+    #
+    #  * [Directory buckets][3]
+    #
+    # * [S3 Storage Lens groups][4]
+    #
+    # * [S3 Access Grants instances, registered locations, or grants][5].
     #
     #  </note>
     #
@@ -7628,15 +7989,15 @@ module Aws::S3Control
     #
     #   For more information about the required Storage Lens Groups
     #   permissions, see [Setting account permissions to use S3 Storage Lens
-    #   groups][4].
+    #   groups][6].
     #
     # Directory bucket permissions
     #
-    # : For directory buckets, you must have the `s3express:TagResource`
-    #   permission to use this operation. For more information about
-    #   directory buckets policies and permissions, see [Identity and Access
-    #   Management (IAM) for S3 Express One Zone][5] in the *Amazon S3 User
-    #   Guide*.
+    # : For directory buckets and access points for directory buckets, you
+    #   must have the `s3express:TagResource` permission to use this
+    #   operation. For more information about directory buckets policies and
+    #   permissions, see [Identity and Access Management (IAM) for S3
+    #   Express One Zone][7] in the *Amazon S3 User Guide*.
     #
     # HTTP Host header syntax
     #
@@ -7644,16 +8005,22 @@ module Aws::S3Control
     #   `s3express-control.region.amazonaws.com`.
     #
     # For information about S3 Tagging errors, see [List of Amazon S3
-    # Tagging error codes][6].
+    # Tagging error codes][8].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
-    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
-    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
-    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
-    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
-    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html
+    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html
+    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
+    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
+    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
+    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
+    # [7]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
+    # [8]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
     #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID that created the S3 resource that
@@ -7699,11 +8066,15 @@ module Aws::S3Control
     # <note markdown="1"> This operation is only supported for the following Amazon S3
     # resources:
     #
-    #  * [Directory buckets][1]
+    #  * [Access Points for directory buckets][1]
+    #
+    # * [Access Points for general purpose buckets][2]
+    #
+    # * [Directory buckets][3]
     #
-    # * [Storage Lens groups][2]
+    # * [Storage Lens groups][4]
     #
-    # * [S3 Access Grants instances, registered locations, and grants][3].
+    # * [S3 Access Grants instances, registered locations, and grants][5].
     #
     #  </note>
     #
@@ -7714,15 +8085,15 @@ module Aws::S3Control
     #
     #   For more information about the required Storage Lens Groups
     #   permissions, see [Setting account permissions to use S3 Storage Lens
-    #   groups][4].
+    #   groups][6].
     #
     # Directory bucket permissions
     #
-    # : For directory buckets, you must have the `s3express:UntagResource`
-    #   permission to use this operation. For more information about
-    #   directory buckets policies and permissions, see [Identity and Access
-    #   Management (IAM) for S3 Express One Zone][5] in the *Amazon S3 User
-    #   Guide*.
+    # : For directory buckets and access points for directory buckets, you
+    #   must have the `s3express:UntagResource` permission to use this
+    #   operation. For more information about directory buckets policies and
+    #   permissions, see [Identity and Access Management (IAM) for S3
+    #   Express One Zone][7] in the *Amazon S3 User Guide*.
     #
     # HTTP Host header syntax
     #
@@ -7730,16 +8101,22 @@ module Aws::S3Control
     #   `s3express-control.region.amazonaws.com`.
     #
     # For information about S3 Tagging errors, see [List of Amazon S3
-    # Tagging error codes][6].
+    # Tagging error codes][8].
+    #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
-    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
-    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
-    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
-    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
-    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html
+    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html
+    # [3]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html
+    # [4]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html
+    # [5]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html
+    # [6]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
+    # [7]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html
+    # [8]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#S3TaggingErrorCodeList
     #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID that owns the resource that you're
@@ -7786,6 +8163,10 @@ module Aws::S3Control
     #
     # : You must also have the following permission: `iam:PassRole`
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     # @option params [String] :account_id
     #   The Amazon Web Services account ID of the S3 Access Grants instance.
     #
@@ -7861,6 +8242,10 @@ module Aws::S3Control
     #
     # * [UpdateJobStatus][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html
@@ -7926,6 +8311,10 @@ module Aws::S3Control
     #
     # * [UpdateJobStatus][5]
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html
@@ -7988,6 +8377,10 @@ module Aws::S3Control
     # For information about Storage Lens groups errors, see [List of Amazon
     # S3 Storage Lens error codes][2].
     #
+    # You must URL encode any signed header values that contain spaces. For
+    # example, if your header value is `my file.txt`, containing two spaces
+    # after `my`, you must URL encode this value to `my%20%20file.txt`.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_iam_permissions.html#storage_lens_groups_permissions
@@ -8096,7 +8489,7 @@ module Aws::S3Control
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-s3control'
-      context[:gem_version] = '1.114.0'
+      context[:gem_version] = '1.116.0'
       Seahorse::Client::Request.new(handlers, context)
     end