@aws-sdk/client-s3 3.326.0 → 3.327.0

package/dist-types/commands/PutBucketLifecycleConfigurationCommand.d.ts

@@ -20,10 +20,10 @@ export interface PutBucketLifecycleConfigurationCommandOutput extends __Metadata
 /**
  * @public
  * <p>Creates a new lifecycle configuration for the bucket or replaces an existing lifecycle
- *          configuration. Keep in mind that this will overwrite an existing lifecycle configuration, so if
- *          you want to retain any configuration details, they must be included in the new lifecycle
- *          configuration. For information about lifecycle configuration, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html">Managing your storage
- *             lifecycle</a>.</p>
+ *          configuration. Keep in mind that this will overwrite an existing lifecycle configuration,
+ *          so if you want to retain any configuration details, they must be included in the new
+ *          lifecycle configuration. For information about lifecycle configuration, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lifecycle-mgmt.html">Managing
+ *             your storage lifecycle</a>.</p>
  *          <note>
  *             <p>Bucket lifecycle configuration now supports specifying a lifecycle rule using an
  *             object key name prefix, one or more object tags, or a combination of both. Accordingly,
@@ -31,64 +31,66 @@ export interface PutBucketLifecycleConfigurationCommandOutput extends __Metadata
  *             filtering based only on an object key name prefix, which is supported for backward
  *             compatibility. For the related API description, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycle.html">PutBucketLifecycle</a>.</p>
  *          </note>
- *          <p>
- *             <b>Rules</b>
- *          </p>
- *          <p>You specify the lifecycle configuration in your request body. The lifecycle
- *          configuration is specified as XML consisting of one or more rules. An Amazon S3 Lifecycle
- *          configuration can have up to 1,000 rules. This limit is not adjustable. Each rule consists
- *          of the following:</p>
- *          <ul>
- *             <li>
- *                <p>Filter identifying a subset of objects to which the rule applies. The filter can
- *                be based on a key name prefix, object tags, or a combination of both.</p>
- *             </li>
- *             <li>
- *                <p>Status whether the rule is in effect.</p>
- *             </li>
- *             <li>
- *                <p>One or more lifecycle transition and expiration actions that you want Amazon S3 to
- *                perform on the objects identified by the filter. If the state of your bucket is
- *                versioning-enabled or versioning-suspended, you can have many versions of the same
- *                object (one current version and zero or more noncurrent versions). Amazon S3 provides
- *                predefined actions that you can specify for current and noncurrent object
- *                versions.</p>
- *             </li>
- *          </ul>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html">Object
- *             Lifecycle Management</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/intro-lifecycle-rules.html">Lifecycle Configuration Elements</a>.</p>
- *          <p>
- *             <b>Permissions</b>
- *          </p>
- *          <p>By default, all Amazon S3 resources are private, including buckets, objects, and related
- *          subresources (for example, lifecycle configuration and website configuration). Only the
- *          resource owner (that is, the Amazon Web Services account that created it) can access the resource. The
- *          resource owner can optionally grant access permissions to others by writing an access
- *          policy. For this operation, a user must get the <code>s3:PutLifecycleConfiguration</code>
- *          permission.</p>
- *          <p>You can also explicitly deny permissions. Explicit deny also supersedes any other
- *          permissions. If you want to block users or accounts from removing or deleting objects from
- *          your bucket, you must deny them permissions for the following actions:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <code>s3:DeleteObject</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>s3:DeleteObjectVersion</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>s3:PutLifecycleConfiguration</code>
- *                </p>
- *             </li>
- *          </ul>
- *          <p>For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your Amazon S3
- *             Resources</a>.</p>
- *          <p>The following are related to <code>PutBucketLifecycleConfiguration</code>:</p>
+ *          <dl>
+ *             <dt>Rules</dt>
+ *             <dd>
+ *                <p>You specify the lifecycle configuration in your request body. The lifecycle
+ *                   configuration is specified as XML consisting of one or more rules. An Amazon S3 Lifecycle
+ *                   configuration can have up to 1,000 rules. This limit is not adjustable. Each rule consists
+ *                   of the following:</p>
+ *                <ul>
+ *                   <li>
+ *                      <p>Filter identifying a subset of objects to which the rule applies. The filter can
+ *                         be based on a key name prefix, object tags, or a combination of both.</p>
+ *                   </li>
+ *                   <li>
+ *                      <p>Status whether the rule is in effect.</p>
+ *                   </li>
+ *                   <li>
+ *                      <p>One or more lifecycle transition and expiration actions that you want Amazon S3 to
+ *                         perform on the objects identified by the filter. If the state of your bucket is
+ *                         versioning-enabled or versioning-suspended, you can have many versions of the same
+ *                         object (one current version and zero or more noncurrent versions). Amazon S3 provides
+ *                         predefined actions that you can specify for current and noncurrent object
+ *                         versions.</p>
+ *                   </li>
+ *                </ul>
+ *                <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html">Object Lifecycle Management</a>
+ *                   and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/intro-lifecycle-rules.html">Lifecycle Configuration Elements</a>.</p>
+ *             </dd>
+ *             <dt>Permissions</dt>
+ *             <dd>
+ *                <p>By default, all Amazon S3 resources are private, including buckets, objects, and related
+ *                   subresources (for example, lifecycle configuration and website configuration). Only the
+ *                   resource owner (that is, the Amazon Web Services account that created it) can access the resource. The
+ *                   resource owner can optionally grant access permissions to others by writing an access
+ *                   policy. For this operation, a user must get the <code>s3:PutLifecycleConfiguration</code>
+ *                   permission.</p>
+ *                <p>You can also explicitly deny permissions. Explicit deny also supersedes any other
+ *                   permissions. If you want to block users or accounts from removing or deleting objects from
+ *                   your bucket, you must deny them permissions for the following actions:</p>
+ *                <ul>
+ *                   <li>
+ *                      <p>
+ *                         <code>s3:DeleteObject</code>
+ *                      </p>
+ *                   </li>
+ *                   <li>
+ *                      <p>
+ *                         <code>s3:DeleteObjectVersion</code>
+ *                      </p>
+ *                   </li>
+ *                   <li>
+ *                      <p>
+ *                         <code>s3:PutLifecycleConfiguration</code>
+ *                      </p>
+ *                   </li>
+ *                </ul>
+ *                <p>For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to
+ *                   Your Amazon S3 Resources</a>.</p>
+ *             </dd>
+ *          </dl>
+ *          <p>The following operations are related to <code>PutBucketLifecycleConfiguration</code>:</p>
  *          <ul>
  *             <li>
  *                <p>

package/dist-types/commands/PutBucketLoggingCommand.d.ts

@@ -20,56 +20,62 @@ export interface PutBucketLoggingCommandOutput extends __MetadataBearer {
 /**
  * @public
  * <p>Set the logging parameters for a bucket and to specify permissions for who can view and
- *          modify the logging parameters. All logs are saved to buckets in the same Amazon Web Services Region as the
- *          source bucket. To set the logging status of a bucket, you must be the bucket owner.</p>
- *          <p>The bucket owner is automatically granted FULL_CONTROL to all logs. You use the <code>Grantee</code> request element to grant access to other people. The
+ *          modify the logging parameters. All logs are saved to buckets in the same Amazon Web Services Region as
+ *          the source bucket. To set the logging status of a bucket, you must be the bucket
+ *          owner.</p>
+ *          <p>The bucket owner is automatically granted FULL_CONTROL to all logs. You use the
+ *             <code>Grantee</code> request element to grant access to other people. The
  *             <code>Permissions</code> request element specifies the kind of access the grantee has to
  *          the logs.</p>
  *          <important>
- *             <p>If the target bucket for log delivery uses the bucket owner enforced
- *             setting for S3 Object Ownership, you can't use the <code>Grantee</code> request element
- *             to grant access to others. Permissions can only be granted using policies. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html#grant-log-delivery-permissions-general">Permissions for server access log delivery</a> in the
+ *             <p>If the target bucket for log delivery uses the bucket owner enforced setting for S3
+ *             Object Ownership, you can't use the <code>Grantee</code> request element to grant access
+ *             to others. Permissions can only be granted using policies. For more information, see
+ *                <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html#grant-log-delivery-permissions-general">Permissions for server access log delivery</a> in the
  *                <i>Amazon S3 User Guide</i>.</p>
  *          </important>
- *          <p>
- *             <b>Grantee Values</b>
- *          </p>
- *          <p>You can specify the person (grantee) to whom you're assigning access rights (using
- *          request elements) in the following ways:</p>
- *          <ul>
- *             <li>
- *                <p>By the person's ID:</p>
- *                <p>
- *                   <code><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- *                   xsi:type="CanonicalUser"><ID><>ID<></ID><DisplayName><>GranteesEmail<></DisplayName>
- *                   </Grantee></code>
- *                </p>
- *                <p>DisplayName is optional and ignored in the request.</p>
- *             </li>
- *             <li>
- *                <p>By Email address:</p>
- *                <p>
- *                   <code> <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- *                   xsi:type="AmazonCustomerByEmail"><EmailAddress><>Grantees@email.com<></EmailAddress></Grantee></code>
- *                </p>
- *                <p>The grantee is resolved to the CanonicalUser and, in a response to a GET Object
- *                acl request, appears as the CanonicalUser.</p>
- *             </li>
- *             <li>
- *                <p>By URI:</p>
- *                <p>
- *                   <code><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- *                   xsi:type="Group"><URI><>http://acs.amazonaws.com/groups/global/AuthenticatedUsers<></URI></Grantee></code>
- *                </p>
- *             </li>
- *          </ul>
+ *          <dl>
+ *             <dt>Grantee Values</dt>
+ *             <dd>
+ *                <p>You can specify the person (grantee) to whom you're assigning access rights (using
+ *                   request elements) in the following ways:</p>
+ *                <ul>
+ *                   <li>
+ *                      <p>By the person's ID:</p>
+ *                      <p>
+ *                         <code><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ *                         xsi:type="CanonicalUser"><ID><>ID<></ID><DisplayName><>GranteesEmail<></DisplayName>
+ *                         </Grantee></code>
+ *                      </p>
+ *                      <p>DisplayName is optional and ignored in the request.</p>
+ *                   </li>
+ *                   <li>
+ *                      <p>By Email address:</p>
+ *                      <p>
+ *                         <code> <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ *                         xsi:type="AmazonCustomerByEmail"><EmailAddress><>Grantees@email.com<></EmailAddress></Grantee></code>
+ *                      </p>
+ *                      <p>The grantee is resolved to the CanonicalUser and, in a response to a GET Object
+ *                         acl request, appears as the CanonicalUser.</p>
+ *                   </li>
+ *                   <li>
+ *                      <p>By URI:</p>
+ *                      <p>
+ *                         <code><Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ *                         xsi:type="Group"><URI><>http://acs.amazonaws.com/groups/global/AuthenticatedUsers<></URI></Grantee></code>
+ *                      </p>
+ *                   </li>
+ *                </ul>
+ *             </dd>
+ *          </dl>
  *          <p>To enable logging, you use LoggingEnabled and its children request elements. To disable
  *          logging, you use an empty BucketLoggingStatus request element:</p>
  *          <p>
  *             <code><BucketLoggingStatus xmlns="http://doc.s3.amazonaws.com/2006-03-01"
  *             /></code>
  *          </p>
- *          <p>For more information about server access logging, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html">Server Access Logging</a> in the <i>Amazon S3 User Guide</i>. </p>
+ *          <p>For more information about server access logging, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html">Server Access Logging</a> in the
+ *             <i>Amazon S3 User Guide</i>. </p>
  *          <p>For more information about creating a bucket, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html">CreateBucket</a>. For more
  *          information about returning the logging status of a bucket, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLogging.html">GetBucketLogging</a>.</p>
  *          <p>The following operations are related to <code>PutBucketLogging</code>:</p>

package/dist-types/commands/PutBucketMetricsConfigurationCommand.d.ts

@@ -26,10 +26,10 @@ export interface PutBucketMetricsConfigurationCommandOutput extends __MetadataBe
  *          <p>To use this operation, you must have permissions to perform the
  *             <code>s3:PutMetricsConfiguration</code> action. The bucket owner has this permission by
  *          default. The bucket owner can grant this permission to others. For more information about
- *          permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your Amazon S3
- *             Resources</a>.</p>
- *          <p>For information about CloudWatch request metrics for Amazon S3, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/cloudwatch-monitoring.html">Monitoring Metrics with Amazon
- *             CloudWatch</a>.</p>
+ *          permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing
+ *             Access Permissions to Your Amazon S3 Resources</a>.</p>
+ *          <p>For information about CloudWatch request metrics for Amazon S3, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/cloudwatch-monitoring.html">Monitoring
+ *             Metrics with Amazon CloudWatch</a>.</p>
  *          <p>The following operations are related to
  *          <code>PutBucketMetricsConfiguration</code>:</p>
  *          <ul>

package/dist-types/commands/PutBucketNotificationConfigurationCommand.d.ts

@@ -21,7 +21,7 @@ export interface PutBucketNotificationConfigurationCommandOutput extends __Metad
  * @public
  * <p>Enables notifications of specified events for a bucket. For more information about event
  *          notifications, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html">Configuring Event
- *             Notifications</a>.</p>
+ *          Notifications</a>.</p>
  *          <p>Using this API, you can replace an existing notification configuration. The
  *          configuration is an XML file that defines the event types that you want Amazon S3 to publish and
  *          the destination where you want Amazon S3 to publish an event notification when it detects an
@@ -34,19 +34,19 @@ export interface PutBucketNotificationConfigurationCommandOutput extends __Metad
  *          <p>
  *             <code></NotificationConfiguration></code>
  *          </p>
- *          <p>This action replaces the existing notification configuration with the configuration
- *          you include in the request body.</p>
+ *          <p>This action replaces the existing notification configuration with the configuration you
+ *          include in the request body.</p>
  *          <p>After Amazon S3 receives this request, it first verifies that any Amazon Simple Notification
  *          Service (Amazon SNS) or Amazon Simple Queue Service (Amazon SQS) destination exists, and
  *          that the bucket owner has permission to publish to it by sending a test notification. In
  *          the case of Lambda destinations, Amazon S3 verifies that the Lambda function permissions
  *          grant Amazon S3 permission to invoke the function from the Amazon S3 bucket. For more information,
- *          see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html">Configuring Notifications for Amazon S3
- *             Events</a>.</p>
+ *          see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html">Configuring Notifications for Amazon S3 Events</a>.</p>
  *          <p>You can disable notifications by adding the empty NotificationConfiguration
  *          element.</p>
- *          <p>For more information about the number of event notification configurations that you can create per bucket, see
- *          <a href="https://docs.aws.amazon.com/general/latest/gr/s3.html#limits_s3">Amazon S3 service quotas</a> in <i>Amazon Web Services General Reference</i>.</p>
+ *          <p>For more information about the number of event notification configurations that you can
+ *          create per bucket, see <a href="https://docs.aws.amazon.com/general/latest/gr/s3.html#limits_s3">Amazon S3 service quotas</a> in <i>Amazon Web Services
+ *             General Reference</i>.</p>
  *          <p>By default, only the bucket owner can configure notifications on a bucket. However,
  *          bucket owners can use a bucket policy to grant permission to other users to set this
  *          configuration with <code>s3:PutBucketNotification</code> permission.</p>
@@ -54,12 +54,9 @@ export interface PutBucketNotificationConfigurationCommandOutput extends __Metad
  *             <p>The PUT notification is an atomic operation. For example, suppose your notification
  *             configuration includes SNS topic, SQS queue, and Lambda function configurations. When
  *             you send a PUT request with this configuration, Amazon S3 sends test messages to your SNS
- *             topic. If the message fails, the entire PUT action will fail, and Amazon S3 will not add
- *             the configuration to your bucket.</p>
+ *             topic. If the message fails, the entire PUT action will fail, and Amazon S3 will not add the
+ *             configuration to your bucket.</p>
  *          </note>
- *          <p>
- *             <b>Responses</b>
- *          </p>
  *          <p>If the configuration in the request body includes only one
  *             <code>TopicConfiguration</code> specifying only the
  *             <code>s3:ReducedRedundancyLostObject</code> event type, the response will also include

package/dist-types/commands/PutBucketOwnershipControlsCommand.d.ts

@@ -21,8 +21,10 @@ export interface PutBucketOwnershipControlsCommandOutput extends __MetadataBeare
  * @public
  * <p>Creates or modifies <code>OwnershipControls</code> for an Amazon S3 bucket. To use this
  *          operation, you must have the <code>s3:PutBucketOwnershipControls</code> permission. For
- *          more information about Amazon S3 permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/user-guide/using-with-s3-actions.html">Specifying permissions in a policy</a>. </p>
- *          <p>For information about Amazon S3 Object Ownership, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/user-guide/about-object-ownership.html">Using object ownership</a>. </p>
+ *          more information about Amazon S3 permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/user-guide/using-with-s3-actions.html">Specifying permissions in a
+ *             policy</a>. </p>
+ *          <p>For information about Amazon S3 Object Ownership, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/user-guide/about-object-ownership.html">Using object
+ *             ownership</a>. </p>
  *          <p>The following operations are related to <code>PutBucketOwnershipControls</code>:</p>
  *          <ul>
  *             <li>

package/dist-types/commands/PutBucketPolicyCommand.d.ts

@@ -28,11 +28,15 @@ export interface PutBucketPolicyCommandOutput extends __MetadataBearer {
  *          identity that belongs to the bucket owner's account, Amazon S3 returns a <code>405 Method Not
  *             Allowed</code> error.</p>
  *          <important>
- *             <p> As a security precaution, the root user of the Amazon Web Services account that owns a bucket can
- *             always use this operation, even if the policy explicitly denies the root user the
- *             ability to perform this action. </p>
+ *             <p>To ensure that bucket owners don't inadvertently lock themselves out of their own
+ *             buckets, the root principal in a bucket owner's Amazon Web Services account can perform the
+ *             <code>GetBucketPolicy</code>, <code>PutBucketPolicy</code>, and
+ *             <code>DeleteBucketPolicy</code> API actions, even if their bucket policy explicitly
+ *             denies the root principal's access. Bucket owner root principals can only be blocked from performing
+ *             these API actions by VPC endpoint policies and Amazon Web Services Organizations policies.</p>
  *          </important>
- *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html">Bucket policy examples</a>.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html">Bucket policy
+ *             examples</a>.</p>
  *          <p>The following operations are related to <code>PutBucketPolicy</code>:</p>
  *          <ul>
  *             <li>

package/dist-types/commands/PutBucketReplicationCommand.d.ts

@@ -40,34 +40,37 @@ export interface PutBucketReplicationCommandOutput extends __MetadataBearer {
  *             replication of delete markers differently. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-add-config.html#replication-backward-compat-considerations">Backward Compatibility</a>.</p>
  *          </note>
  *          <p>For information about enabling versioning on a bucket, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html">Using Versioning</a>.</p>
- *          <p>
- *             <b>Handling Replication of Encrypted Objects</b>
- *          </p>
- *          <p>By default, Amazon S3 doesn't replicate objects that are stored at rest using server-side
- *          encryption with KMS keys. To replicate Amazon Web Services KMS-encrypted objects, add the
- *          following: <code>SourceSelectionCriteria</code>, <code>SseKmsEncryptedObjects</code>,
- *             <code>Status</code>, <code>EncryptionConfiguration</code>, and
- *             <code>ReplicaKmsKeyID</code>. For information about replication configuration, see
- *             <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-config-for-kms-objects.html">Replicating Objects
- *                Created with SSE Using KMS keys</a>.</p>
- *          <p>For information on <code>PutBucketReplication</code> errors, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ReplicationErrorCodeList">List of
- *             replication-related error codes</a>
- *          </p>
- *          <p>
- *             <b>Permissions</b>
- *          </p>
- *          <p>To create a <code>PutBucketReplication</code> request, you must have <code>s3:PutReplicationConfiguration</code>
- *          permissions for the bucket.
- *          </p>
- *          <p>By default, a resource owner, in this case the Amazon Web Services account that created the bucket, can
- *          perform this operation. The resource owner can also grant others permissions to perform the
- *          operation. For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/using-with-s3-actions.html">Specifying Permissions in a Policy</a>
- *          and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your
- *             Amazon S3 Resources</a>.</p>
- *          <note>
- *             <p>To perform this operation, the user or role performing the action must have the
- *                <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html">iam:PassRole</a> permission.</p>
- *          </note>
+ *          <dl>
+ *             <dt>Handling Replication of Encrypted Objects</dt>
+ *             <dd>
+ *                <p>By default, Amazon S3 doesn't replicate objects that are stored at rest using server-side
+ *                   encryption with KMS keys. To replicate Amazon Web Services KMS-encrypted objects, add the following:
+ *                   <code>SourceSelectionCriteria</code>, <code>SseKmsEncryptedObjects</code>,
+ *                   <code>Status</code>, <code>EncryptionConfiguration</code>, and
+ *                   <code>ReplicaKmsKeyID</code>. For information about replication configuration, see
+ *                   <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-config-for-kms-objects.html">Replicating Objects
+ *                      Created with SSE Using KMS keys</a>.</p>
+ *                <p>For information on <code>PutBucketReplication</code> errors, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ReplicationErrorCodeList">List of
+ *                   replication-related error codes</a>
+ *                </p>
+ *             </dd>
+ *             <dt>Permissions</dt>
+ *             <dd>
+ *                <p>To create a <code>PutBucketReplication</code> request, you must have
+ *                   <code>s3:PutReplicationConfiguration</code> permissions for the bucket.
+ *
+ *                </p>
+ *                <p>By default, a resource owner, in this case the Amazon Web Services account that created the bucket,
+ *                   can perform this operation. The resource owner can also grant others permissions to perform
+ *                   the operation. For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/using-with-s3-actions.html">Specifying Permissions in a
+ *                      Policy</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to
+ *                         Your Amazon S3 Resources</a>.</p>
+ *                <note>
+ *                   <p>To perform this operation, the user or role performing the action must have the
+ *                      <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html">iam:PassRole</a> permission.</p>
+ *                </note>
+ *             </dd>
+ *          </dl>
  *          <p>The following operations are related to <code>PutBucketReplication</code>:</p>
  *          <ul>
  *             <li>

package/dist-types/commands/PutBucketRequestPaymentCommand.d.ts

@@ -23,7 +23,7 @@ export interface PutBucketRequestPaymentCommandOutput extends __MetadataBearer {
  *          for downloads from the bucket. This configuration parameter enables the bucket owner (only)
  *          to specify that the person requesting the download will be charged for the download. For
  *          more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html">Requester Pays
- *             Buckets</a>.</p>
+ *          Buckets</a>.</p>
  *          <p>The following operations are related to <code>PutBucketRequestPayment</code>:</p>
  *          <ul>
  *             <li>

package/dist-types/commands/PutBucketTaggingCommand.d.ts

@@ -20,23 +20,23 @@ export interface PutBucketTaggingCommandOutput extends __MetadataBearer {
 /**
  * @public
  * <p>Sets the tags for a bucket.</p>
- *          <p>Use tags to organize your Amazon Web Services bill to reflect your own cost structure. To do this, sign
- *          up to get your Amazon Web Services account bill with tag key values included. Then, to see the cost of
- *          combined resources, organize your billing information according to resources with the same
- *          tag key values. For example, you can tag several resources with a specific application
+ *          <p>Use tags to organize your Amazon Web Services bill to reflect your own cost structure. To do this,
+ *          sign up to get your Amazon Web Services account bill with tag key values included. Then, to see the cost
+ *          of combined resources, organize your billing information according to resources with the
+ *          same tag key values. For example, you can tag several resources with a specific application
  *          name, and then organize your billing information to see the total cost of that application
- *          across several services. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Cost Allocation
- *             and Tagging</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/CostAllocTagging.html">Using Cost Allocation in Amazon S3 Bucket
- *                Tags</a>.</p>
+ *          across several services. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html">Cost Allocation and
+ *             Tagging</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/CostAllocTagging.html">Using Cost Allocation in Amazon S3 Bucket
+ *             Tags</a>.</p>
  *          <note>
- *             <p>
- *             When this operation sets the tags for a bucket, it will overwrite any current tags the
- *             bucket already has. You cannot use this operation to add tags to an existing list of tags.</p>
+ *             <p> When this operation sets the tags for a bucket, it will overwrite any current tags
+ *             the bucket already has. You cannot use this operation to add tags to an existing list of
+ *             tags.</p>
  *          </note>
  *          <p>To use this operation, you must have permissions to perform the
  *             <code>s3:PutBucketTagging</code> action. The bucket owner has this permission by default
- *          and can grant this permission to others. For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing Access Permissions to Your Amazon S3
- *             Resources</a>.</p>
+ *          and can grant this permission to others. For more information about permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources">Permissions Related to Bucket Subresource Operations</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html">Managing
+ *             Access Permissions to Your Amazon S3 Resources</a>.</p>
  *          <p>
  *             <code>PutBucketTagging</code> has the following special errors:</p>
  *          <ul>

package/dist-types/commands/PutBucketVersioningCommand.d.ts

@@ -30,21 +30,19 @@ export interface PutBucketVersioningCommandOutput extends __MetadataBearer {
  *          <p>If the versioning state has never been set on a bucket, it has no versioning state; a
  *             <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html">GetBucketVersioning</a> request does not return a versioning state value.</p>
  *          <p>In order to enable MFA Delete, you must be the bucket owner. If you are the bucket owner
- *          and want to enable MFA Delete in the bucket versioning configuration, you must
- *          include the <code>x-amz-mfa request</code> header and the
- *             <code>Status</code> and the <code>MfaDelete</code> request elements in a request to set
- *          the versioning state of the bucket.</p>
+ *          and want to enable MFA Delete in the bucket versioning configuration, you must include the
+ *             <code>x-amz-mfa request</code> header and the <code>Status</code> and the
+ *             <code>MfaDelete</code> request elements in a request to set the versioning state of the
+ *          bucket.</p>
  *          <important>
- *             <p>If you have an object expiration lifecycle policy in your non-versioned bucket and
+ *             <p>If you have an object expiration lifecycle configuration in your non-versioned bucket and
  *             you want to maintain the same permanent delete behavior when you enable versioning, you
- *             must add a noncurrent expiration policy. The noncurrent expiration lifecycle policy will
+ *             must add a noncurrent expiration policy. The noncurrent expiration lifecycle configuration will
  *             manage the deletes of the noncurrent object versions in the version-enabled bucket. (A
  *             version-enabled bucket maintains one current and zero or more noncurrent object
  *             versions.) For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html#lifecycle-and-other-bucket-config">Lifecycle and Versioning</a>.</p>
  *          </important>
- *          <p class="title">
- *             <b>Related Resources</b>
- *          </p>
+ *          <p>The following operations are related to <code>PutBucketVersioning</code>:</p>
  *          <ul>
  *             <li>
  *                <p>