aws-sdk-s3control 1.125.0 → 1.126.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e149231afc8903aa9e3ddf29669e57af065f4329cbc38710483d0cf1f0a4a60
-  data.tar.gz: a658d546d6bbecf0d70ff0c41716c1a035a201e508b1a363dfea4143b0cc975c
+  metadata.gz: d10859bd76ad41bea4c0f04ce5f53f239e5428d4a92baba0bb34e9a52ba82e18
+  data.tar.gz: 64e1ff53596d69a2b869eda8699a3ebe6e60694961b0f553474efb47bc43e3bd
 SHA512:
-  metadata.gz: 35c866656effb0730c16926c97c300510b699b476db43b67cfa68a9154f308bedf17789acc9b3ed1a1807fa774e5c790a90e8a87802347dbb1c620f28fb04611
-  data.tar.gz: 2e666c924003e0859ca7b8eae54bd25ac6325057149d5cb74178e3e1be583d7fc960a8fff85b66ca62262920979a8fb549d41442bcacbb198f6dd8dd993b971f
+  metadata.gz: f4f419561d0837f9fc4152d550bf2002cd44b6d12d120f72bd4adf937f88352abb902d9651e3b5a313b1be903621b2cd63ad28f4f15faef7c5141895f627ed5f
+  data.tar.gz: 54231ab5e0638628e0a7d5ab3a01186cd54858844a475b732dd831b14e9f2f1e41277ab65ed6977503ff052f4d321927330885d88c8263cda64b34177530b67e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.126.0 (2026-01-28)
+------------------
+
+* Feature - Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.
+
 1.125.0 (2026-01-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.125.0
+1.126.0

data/lib/aws-sdk-s3control/client.rb

@@ -1474,6 +1474,14 @@ module Aws::S3Control
     #         checksum_algorithm: "CRC32", # accepts CRC32, CRC32C, CRC64NVME, MD5, SHA1, SHA256
     #         checksum_type: "FULL_OBJECT", # accepts FULL_OBJECT, COMPOSITE
     #       },
+    #       s3_update_object_encryption: {
+    #         object_encryption: {
+    #           ssekms: {
+    #             kms_key_arn: "NonEmptyKmsKeyArnString", # required
+    #             bucket_key_enabled: false,
+    #           },
+    #         },
+    #       },
     #     },
     #     report: { # required
     #       bucket: "S3BucketArnString",
@@ -3010,6 +3018,8 @@ module Aws::S3Control
     #   resp.job.operation.s3_put_object_retention.retention.mode #=> String, one of "COMPLIANCE", "GOVERNANCE"
     #   resp.job.operation.s3_compute_object_checksum.checksum_algorithm #=> String, one of "CRC32", "CRC32C", "CRC64NVME", "MD5", "SHA1", "SHA256"
     #   resp.job.operation.s3_compute_object_checksum.checksum_type #=> String, one of "FULL_OBJECT", "COMPOSITE"
+    #   resp.job.operation.s3_update_object_encryption.object_encryption.ssekms.kms_key_arn #=> String
+    #   resp.job.operation.s3_update_object_encryption.object_encryption.ssekms.bucket_key_enabled #=> Boolean
     #   resp.job.priority #=> Integer
     #   resp.job.progress_summary.total_number_of_tasks #=> Integer
     #   resp.job.progress_summary.number_of_tasks_succeeded #=> Integer
@@ -5846,7 +5856,7 @@ module Aws::S3Control
     #   resp.jobs #=> Array
     #   resp.jobs[0].job_id #=> String
     #   resp.jobs[0].description #=> String
-    #   resp.jobs[0].operation #=> String, one of "LambdaInvoke", "S3PutObjectCopy", "S3PutObjectAcl", "S3PutObjectTagging", "S3DeleteObjectTagging", "S3InitiateRestoreObject", "S3PutObjectLegalHold", "S3PutObjectRetention", "S3ReplicateObject", "S3ComputeObjectChecksum"
+    #   resp.jobs[0].operation #=> String, one of "LambdaInvoke", "S3PutObjectCopy", "S3PutObjectAcl", "S3PutObjectTagging", "S3DeleteObjectTagging", "S3InitiateRestoreObject", "S3PutObjectLegalHold", "S3PutObjectRetention", "S3ReplicateObject", "S3ComputeObjectChecksum", "S3UpdateObjectEncryption"
     #   resp.jobs[0].priority #=> Integer
     #   resp.jobs[0].status #=> String, one of "Active", "Cancelled", "Cancelling", "Complete", "Completing", "Failed", "Failing", "New", "Paused", "Pausing", "Preparing", "Ready", "Suspended"
     #   resp.jobs[0].creation_time #=> Time
@@ -8204,7 +8214,7 @@ module Aws::S3Control
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-s3control'
-      context[:gem_version] = '1.125.0'
+      context[:gem_version] = '1.126.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-s3control/client_api.rb

@@ -342,6 +342,7 @@ module Aws::S3Control
     NotSSEFilter = Shapes::StructureShape.new(name: 'NotSSEFilter')
     ObjectAgeValue = Shapes::IntegerShape.new(name: 'ObjectAgeValue')
     ObjectCreationTime = Shapes::TimestampShape.new(name: 'ObjectCreationTime')
+    ObjectEncryption = Shapes::StructureShape.new(name: 'ObjectEncryption')
     ObjectEncryptionFilter = Shapes::UnionShape.new(name: 'ObjectEncryptionFilter')
     ObjectEncryptionFilterList = Shapes::ListShape.new(name: 'ObjectEncryptionFilterList')
     ObjectLambdaAccessPoint = Shapes::StructureShape.new(name: 'ObjectLambdaAccessPoint')
@@ -476,6 +477,8 @@ module Aws::S3Control
     S3StorageClass = Shapes::StringShape.new(name: 'S3StorageClass')
     S3Tag = Shapes::StructureShape.new(name: 'S3Tag')
     S3TagSet = Shapes::ListShape.new(name: 'S3TagSet')
+    S3UpdateObjectEncryptionOperation = Shapes::StructureShape.new(name: 'S3UpdateObjectEncryptionOperation')
+    S3UpdateObjectEncryptionSSEKMS = Shapes::StructureShape.new(name: 'S3UpdateObjectEncryptionSSEKMS', locationName: "SSE-KMS")
     S3UserMetadata = Shapes::MapShape.new(name: 'S3UserMetadata')
     SSECFilter = Shapes::StructureShape.new(name: 'SSECFilter')
     SSEKMS = Shapes::StructureShape.new(name: 'SSEKMS', locationName: "SSE-KMS")
@@ -1281,6 +1284,7 @@ module Aws::S3Control
     JobOperation.add_member(:s3_put_object_retention, Shapes::ShapeRef.new(shape: S3SetObjectRetentionOperation, location_name: "S3PutObjectRetention", metadata: {"box" => true}))
     JobOperation.add_member(:s3_replicate_object, Shapes::ShapeRef.new(shape: S3ReplicateObjectOperation, location_name: "S3ReplicateObject", metadata: {"box" => true}))
     JobOperation.add_member(:s3_compute_object_checksum, Shapes::ShapeRef.new(shape: S3ComputeObjectChecksumOperation, location_name: "S3ComputeObjectChecksum", metadata: {"box" => true}))
+    JobOperation.add_member(:s3_update_object_encryption, Shapes::ShapeRef.new(shape: S3UpdateObjectEncryptionOperation, location_name: "S3UpdateObjectEncryption", metadata: {"box" => true}))
     JobOperation.struct_class = Types::JobOperation
 
     JobProgressSummary.add_member(:total_number_of_tasks, Shapes::ShapeRef.new(shape: JobTotalNumberOfTasks, location_name: "TotalNumberOfTasks", metadata: {"box" => true}))
@@ -1583,6 +1587,9 @@ module Aws::S3Control
 
     NotSSEFilter.struct_class = Types::NotSSEFilter
 
+    ObjectEncryption.add_member(:ssekms, Shapes::ShapeRef.new(shape: S3UpdateObjectEncryptionSSEKMS, location_name: "SSE-KMS"))
+    ObjectEncryption.struct_class = Types::ObjectEncryption
+
     ObjectEncryptionFilter.add_member(:sses3, Shapes::ShapeRef.new(shape: SSES3Filter, location_name: "SSE-S3"))
     ObjectEncryptionFilter.add_member(:ssekms, Shapes::ShapeRef.new(shape: SSEKMSFilter, location_name: "SSE-KMS"))
     ObjectEncryptionFilter.add_member(:dssekms, Shapes::ShapeRef.new(shape: DSSEKMSFilter, location_name: "DSSE-KMS"))
@@ -1941,6 +1948,13 @@ module Aws::S3Control
 
     S3TagSet.member = Shapes::ShapeRef.new(shape: S3Tag)
 
+    S3UpdateObjectEncryptionOperation.add_member(:object_encryption, Shapes::ShapeRef.new(shape: ObjectEncryption, location_name: "ObjectEncryption"))
+    S3UpdateObjectEncryptionOperation.struct_class = Types::S3UpdateObjectEncryptionOperation
+
+    S3UpdateObjectEncryptionSSEKMS.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: NonEmptyKmsKeyArnString, required: true, location_name: "KMSKeyArn"))
+    S3UpdateObjectEncryptionSSEKMS.add_member(:bucket_key_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "BucketKeyEnabled", metadata: {"box" => true}))
+    S3UpdateObjectEncryptionSSEKMS.struct_class = Types::S3UpdateObjectEncryptionSSEKMS
+
     S3UserMetadata.key = Shapes::ShapeRef.new(shape: NonEmptyMaxLength1024String)
     S3UserMetadata.value = Shapes::ShapeRef.new(shape: MaxLength1024String)
 

data/lib/aws-sdk-s3control/types.rb

@@ -4243,6 +4243,18 @@ module Aws::S3Control
     #   object in the manifest.
     #   @return [Types::S3ComputeObjectChecksumOperation]
     #
+    # @!attribute [rw] s3_update_object_encryption
+    #   Updates the server-side encryption type of an existing encrypted
+    #   object in a general purpose bucket. You can use the
+    #   `UpdateObjectEncryption` operation to change encrypted objects from
+    #   server-side encryption with Amazon S3 managed keys (SSE-S3) to
+    #   server-side encryption with Key Management Service (KMS) keys
+    #   (SSE-KMS), or to apply S3 Bucket Keys. You can also use the
+    #   `UpdateObjectEncryption` operation to change the customer-managed
+    #   KMS key used to encrypt your data so that you can comply with custom
+    #   key-rotation standards.
+    #   @return [Types::S3UpdateObjectEncryptionOperation]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/JobOperation AWS API Documentation
     #
     class JobOperation < Struct.new(
@@ -4255,7 +4267,8 @@ module Aws::S3Control
       :s3_put_object_legal_hold,
       :s3_put_object_retention,
       :s3_replicate_object,
-      :s3_compute_object_checksum)
+      :s3_compute_object_checksum,
+      :s3_update_object_encryption)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5999,6 +6012,25 @@ module Aws::S3Control
     #
     class NotSSEFilter < Aws::EmptyStructure; end
 
+    # The updated server-side encryption type for this object. The
+    # `UpdateObjectEncryption` operation supports the SSE-KMS encryption
+    # type.
+    #
+    # Valid Values: `SSEKMS`
+    #
+    # @!attribute [rw] ssekms
+    #   Specifies to update the object encryption type to server-side
+    #   encryption with Key Management Service (KMS) keys (SSE-KMS).
+    #   @return [Types::S3UpdateObjectEncryptionSSEKMS]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/ObjectEncryption AWS API Documentation
+    #
+    class ObjectEncryption < Struct.new(
+      :ssekms)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An optional filter for the S3JobManifestGenerator that identifies the
     # subset of objects by encryption type.
     #
@@ -8030,6 +8062,52 @@ module Aws::S3Control
       include Aws::Structure
     end
 
+    # With the `UpdateObjectEncryption` operation, you can atomically update
+    # the server-side encryption type of an existing object in a general
+    # purpose bucket without any data movement.
+    #
+    # @!attribute [rw] object_encryption
+    #   The updated server-side encryption type for this S3 object. The
+    #   `UpdateObjectEncryption` operation supports the SSE-KMS encryption
+    #   type.
+    #   @return [Types::ObjectEncryption]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/S3UpdateObjectEncryptionOperation AWS API Documentation
+    #
+    class S3UpdateObjectEncryptionOperation < Struct.new(
+      :object_encryption)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # If `SSEKMS` is specified for `UpdateObjectEncryption`, this data type
+    # specifies the Amazon Web Services KMS key Amazon Resource Name (ARN)
+    # to use and whether to use an S3 Bucket Key for server-side encryption
+    # using Key Management Service (KMS) keys (SSE-KMS).
+    #
+    # @!attribute [rw] kms_key_arn
+    #   Specifies the Amazon Web Services KMS key Amazon Resource Name (ARN)
+    #   to use for the updated server-side encryption type. Required if
+    #   `UpdateObjectEncryption` specifies `SSEKMS`.
+    #   @return [String]
+    #
+    # @!attribute [rw] bucket_key_enabled
+    #   Specifies whether Amazon S3 should use an S3 Bucket Key for object
+    #   encryption with server-side encryption using Key Management Service
+    #   (KMS) keys (SSE-KMS). If this value isn't specified, it defaults to
+    #   `false`. Setting this value to `true` causes Amazon S3 to use an S3
+    #   Bucket Key for update object encryption with SSE-KMS.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/S3UpdateObjectEncryptionSSEKMS AWS API Documentation
+    #
+    class S3UpdateObjectEncryptionSSEKMS < Struct.new(
+      :kms_key_arn,
+      :bucket_key_enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A filter that returns objects that are encrypted by server-side
     # encryption with customer-provided keys (SSE-C).
     #

data/lib/aws-sdk-s3control.rb

@@ -54,7 +54,7 @@ module Aws::S3Control
   autoload :EndpointProvider, 'aws-sdk-s3control/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-s3control/endpoints'
 
-  GEM_VERSION = '1.125.0'
+  GEM_VERSION = '1.126.0'
 
 end
 

data/sig/client.rbs

@@ -360,6 +360,14 @@ module Aws
                           s3_compute_object_checksum: {
                             checksum_algorithm: ("CRC32" | "CRC32C" | "CRC64NVME" | "MD5" | "SHA1" | "SHA256")?,
                             checksum_type: ("FULL_OBJECT" | "COMPOSITE")?
+                          }?,
+                          s3_update_object_encryption: {
+                            object_encryption: {
+                              ssekms: {
+                                kms_key_arn: ::String,
+                                bucket_key_enabled: bool?
+                              }?
+                            }?
                           }?
                         },
                         report: {

data/sig/types.rbs

@@ -943,7 +943,7 @@ module Aws::S3Control
     class JobListDescriptor
       attr_accessor job_id: ::String
       attr_accessor description: ::String
-      attr_accessor operation: ("LambdaInvoke" | "S3PutObjectCopy" | "S3PutObjectAcl" | "S3PutObjectTagging" | "S3DeleteObjectTagging" | "S3InitiateRestoreObject" | "S3PutObjectLegalHold" | "S3PutObjectRetention" | "S3ReplicateObject" | "S3ComputeObjectChecksum")
+      attr_accessor operation: ("LambdaInvoke" | "S3PutObjectCopy" | "S3PutObjectAcl" | "S3PutObjectTagging" | "S3DeleteObjectTagging" | "S3InitiateRestoreObject" | "S3PutObjectLegalHold" | "S3PutObjectRetention" | "S3ReplicateObject" | "S3ComputeObjectChecksum" | "S3UpdateObjectEncryption")
       attr_accessor priority: ::Integer
       attr_accessor status: ("Active" | "Cancelled" | "Cancelling" | "Complete" | "Completing" | "Failed" | "Failing" | "New" | "Paused" | "Pausing" | "Preparing" | "Ready" | "Suspended")
       attr_accessor creation_time: ::Time
@@ -1006,6 +1006,7 @@ module Aws::S3Control
       attr_accessor s3_put_object_retention: Types::S3SetObjectRetentionOperation
       attr_accessor s3_replicate_object: Types::S3ReplicateObjectOperation
       attr_accessor s3_compute_object_checksum: Types::S3ComputeObjectChecksumOperation
+      attr_accessor s3_update_object_encryption: Types::S3UpdateObjectEncryptionOperation
       SENSITIVE: []
     end
 
@@ -1402,6 +1403,11 @@ module Aws::S3Control
     class NotSSEFilter < Aws::EmptyStructure
     end
 
+    class ObjectEncryption
+      attr_accessor ssekms: Types::S3UpdateObjectEncryptionSSEKMS
+      SENSITIVE: []
+    end
+
     class ObjectEncryptionFilter
       attr_accessor sses3: Types::SSES3Filter
       attr_accessor ssekms: Types::SSEKMSFilter
@@ -1852,6 +1858,17 @@ module Aws::S3Control
       SENSITIVE: []
     end
 
+    class S3UpdateObjectEncryptionOperation
+      attr_accessor object_encryption: Types::ObjectEncryption
+      SENSITIVE: []
+    end
+
+    class S3UpdateObjectEncryptionSSEKMS
+      attr_accessor kms_key_arn: ::String
+      attr_accessor bucket_key_enabled: bool
+      SENSITIVE: []
+    end
+
     class SSECFilter < Aws::EmptyStructure
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-s3control
 version: !ruby/object:Gem::Version
-  version: 1.125.0
+  version: 1.126.0
 platform: ruby
 authors:
 - Amazon Web Services