@mavogel/awscdk-rootmail 0.0.143 → 0.0.144

package/node_modules/@aws-sdk/client-route-53/dist-types/ts3.4/commands/UpdateHostedZoneCommentCommand.d.ts

@@ -37,4 +37,15 @@ declare const UpdateHostedZoneCommentCommand_base: {
   >;
   getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
-export declare class UpdateHostedZoneCommentCommand extends UpdateHostedZoneCommentCommand_base {}
+export declare class UpdateHostedZoneCommentCommand extends UpdateHostedZoneCommentCommand_base {
+  protected static __types: {
+    api: {
+      input: UpdateHostedZoneCommentRequest;
+      output: UpdateHostedZoneCommentResponse;
+    };
+    sdk: {
+      input: UpdateHostedZoneCommentCommandInput;
+      output: UpdateHostedZoneCommentCommandOutput;
+    };
+  };
+}

package/node_modules/@aws-sdk/client-route-53/dist-types/ts3.4/commands/UpdateTrafficPolicyCommentCommand.d.ts

@@ -37,4 +37,15 @@ declare const UpdateTrafficPolicyCommentCommand_base: {
   >;
   getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
-export declare class UpdateTrafficPolicyCommentCommand extends UpdateTrafficPolicyCommentCommand_base {}
+export declare class UpdateTrafficPolicyCommentCommand extends UpdateTrafficPolicyCommentCommand_base {
+  protected static __types: {
+    api: {
+      input: UpdateTrafficPolicyCommentRequest;
+      output: UpdateTrafficPolicyCommentResponse;
+    };
+    sdk: {
+      input: UpdateTrafficPolicyCommentCommandInput;
+      output: UpdateTrafficPolicyCommentCommandOutput;
+    };
+  };
+}

package/node_modules/@aws-sdk/client-route-53/dist-types/ts3.4/commands/UpdateTrafficPolicyInstanceCommand.d.ts

@@ -37,4 +37,15 @@ declare const UpdateTrafficPolicyInstanceCommand_base: {
   >;
   getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
-export declare class UpdateTrafficPolicyInstanceCommand extends UpdateTrafficPolicyInstanceCommand_base {}
+export declare class UpdateTrafficPolicyInstanceCommand extends UpdateTrafficPolicyInstanceCommand_base {
+  protected static __types: {
+    api: {
+      input: UpdateTrafficPolicyInstanceRequest;
+      output: UpdateTrafficPolicyInstanceResponse;
+    };
+    sdk: {
+      input: UpdateTrafficPolicyInstanceCommandInput;
+      output: UpdateTrafficPolicyInstanceCommandOutput;
+    };
+  };
+}

package/node_modules/@aws-sdk/client-route-53/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-route-53",
   "description": "AWS SDK for JavaScript Route 53 Client for Node.js, Browser and React Native",
-  "version": "3.651.1",
+  "version": "3.654.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-route-53",
@@ -20,47 +20,47 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.651.1",
-    "@aws-sdk/client-sts": "3.651.1",
-    "@aws-sdk/core": "3.651.1",
-    "@aws-sdk/credential-provider-node": "3.651.1",
-    "@aws-sdk/middleware-host-header": "3.649.0",
-    "@aws-sdk/middleware-logger": "3.649.0",
-    "@aws-sdk/middleware-recursion-detection": "3.649.0",
-    "@aws-sdk/middleware-sdk-route53": "3.649.0",
-    "@aws-sdk/middleware-user-agent": "3.649.0",
-    "@aws-sdk/region-config-resolver": "3.649.0",
-    "@aws-sdk/types": "3.649.0",
-    "@aws-sdk/util-endpoints": "3.649.0",
-    "@aws-sdk/util-user-agent-browser": "3.649.0",
-    "@aws-sdk/util-user-agent-node": "3.649.0",
-    "@aws-sdk/xml-builder": "3.649.0",
-    "@smithy/config-resolver": "^3.0.6",
-    "@smithy/core": "^2.4.1",
-    "@smithy/fetch-http-handler": "^3.2.5",
-    "@smithy/hash-node": "^3.0.4",
-    "@smithy/invalid-dependency": "^3.0.4",
-    "@smithy/middleware-content-length": "^3.0.6",
-    "@smithy/middleware-endpoint": "^3.1.1",
-    "@smithy/middleware-retry": "^3.0.16",
-    "@smithy/middleware-serde": "^3.0.4",
-    "@smithy/middleware-stack": "^3.0.4",
-    "@smithy/node-config-provider": "^3.1.5",
-    "@smithy/node-http-handler": "^3.2.0",
-    "@smithy/protocol-http": "^4.1.1",
-    "@smithy/smithy-client": "^3.3.0",
-    "@smithy/types": "^3.4.0",
-    "@smithy/url-parser": "^3.0.4",
+    "@aws-sdk/client-sso-oidc": "3.654.0",
+    "@aws-sdk/client-sts": "3.654.0",
+    "@aws-sdk/core": "3.654.0",
+    "@aws-sdk/credential-provider-node": "3.654.0",
+    "@aws-sdk/middleware-host-header": "3.654.0",
+    "@aws-sdk/middleware-logger": "3.654.0",
+    "@aws-sdk/middleware-recursion-detection": "3.654.0",
+    "@aws-sdk/middleware-sdk-route53": "3.654.0",
+    "@aws-sdk/middleware-user-agent": "3.654.0",
+    "@aws-sdk/region-config-resolver": "3.654.0",
+    "@aws-sdk/types": "3.654.0",
+    "@aws-sdk/util-endpoints": "3.654.0",
+    "@aws-sdk/util-user-agent-browser": "3.654.0",
+    "@aws-sdk/util-user-agent-node": "3.654.0",
+    "@aws-sdk/xml-builder": "3.654.0",
+    "@smithy/config-resolver": "^3.0.8",
+    "@smithy/core": "^2.4.3",
+    "@smithy/fetch-http-handler": "^3.2.7",
+    "@smithy/hash-node": "^3.0.6",
+    "@smithy/invalid-dependency": "^3.0.6",
+    "@smithy/middleware-content-length": "^3.0.8",
+    "@smithy/middleware-endpoint": "^3.1.3",
+    "@smithy/middleware-retry": "^3.0.18",
+    "@smithy/middleware-serde": "^3.0.6",
+    "@smithy/middleware-stack": "^3.0.6",
+    "@smithy/node-config-provider": "^3.1.7",
+    "@smithy/node-http-handler": "^3.2.2",
+    "@smithy/protocol-http": "^4.1.3",
+    "@smithy/smithy-client": "^3.3.2",
+    "@smithy/types": "^3.4.2",
+    "@smithy/url-parser": "^3.0.6",
     "@smithy/util-base64": "^3.0.0",
     "@smithy/util-body-length-browser": "^3.0.0",
     "@smithy/util-body-length-node": "^3.0.0",
-    "@smithy/util-defaults-mode-browser": "^3.0.16",
-    "@smithy/util-defaults-mode-node": "^3.0.16",
-    "@smithy/util-endpoints": "^2.1.0",
-    "@smithy/util-middleware": "^3.0.4",
-    "@smithy/util-retry": "^3.0.4",
+    "@smithy/util-defaults-mode-browser": "^3.0.18",
+    "@smithy/util-defaults-mode-node": "^3.0.18",
+    "@smithy/util-endpoints": "^2.1.2",
+    "@smithy/util-middleware": "^3.0.6",
+    "@smithy/util-retry": "^3.0.6",
     "@smithy/util-utf8": "^3.0.0",
-    "@smithy/util-waiter": "^3.1.3",
+    "@smithy/util-waiter": "^3.1.5",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@aws-sdk/client-s3/dist-cjs/index.js

@@ -48,6 +48,7 @@ __export(src_exports, {
   CreateMultipartUploadRequestFilterSensitiveLog: () => CreateMultipartUploadRequestFilterSensitiveLog,
   CreateSessionCommand: () => CreateSessionCommand,
   CreateSessionOutputFilterSensitiveLog: () => CreateSessionOutputFilterSensitiveLog,
+  CreateSessionRequestFilterSensitiveLog: () => CreateSessionRequestFilterSensitiveLog,
   DataRedundancy: () => DataRedundancy,
   DeleteBucketAnalyticsConfigurationCommand: () => DeleteBucketAnalyticsConfigurationCommand,
   DeleteBucketCommand: () => DeleteBucketCommand,
@@ -873,8 +874,15 @@ var SessionCredentialsFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
 }), "SessionCredentialsFilterSensitiveLog");
 var CreateSessionOutputFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
+  ...obj.SSEKMSKeyId && { SSEKMSKeyId: import_smithy_client.SENSITIVE_STRING },
+  ...obj.SSEKMSEncryptionContext && { SSEKMSEncryptionContext: import_smithy_client.SENSITIVE_STRING },
   ...obj.Credentials && { Credentials: SessionCredentialsFilterSensitiveLog(obj.Credentials) }
 }), "CreateSessionOutputFilterSensitiveLog");
+var CreateSessionRequestFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
+  ...obj,
+  ...obj.SSEKMSKeyId && { SSEKMSKeyId: import_smithy_client.SENSITIVE_STRING },
+  ...obj.SSEKMSEncryptionContext && { SSEKMSEncryptionContext: import_smithy_client.SENSITIVE_STRING }
+}), "CreateSessionRequestFilterSensitiveLog");
 var ServerSideEncryptionByDefaultFilterSensitiveLog = /* @__PURE__ */ __name((obj) => ({
   ...obj,
   ...obj.KMSMasterKeyID && { KMSMasterKeyID: import_smithy_client.SENSITIVE_STRING }
@@ -1308,7 +1316,11 @@ var se_CreateMultipartUploadCommand = /* @__PURE__ */ __name(async (input, conte
 var se_CreateSessionCommand = /* @__PURE__ */ __name(async (input, context) => {
   const b = (0, import_core2.requestBuilder)(input, context);
   const headers = (0, import_smithy_client.map)({}, isSerializableHeaderValue, {
-    [_xacsm]: input[_SM]
+    [_xacsm]: input[_SM],
+    [_xasse]: input[_SSE],
+    [_xasseakki]: input[_SSEKMSKI],
+    [_xassec]: input[_SSEKMSEC],
+    [_xassebke]: [() => isSerializableHeaderValue(input[_BKE]), () => input[_BKE].toString()]
   });
   b.bp("/");
   b.p("Bucket", () => input.Bucket, "{Bucket}", false);
@@ -3258,7 +3270,11 @@ var de_CreateSessionCommand = /* @__PURE__ */ __name(async (output, context) =>
     return de_CommandError(output, context);
   }
   const contents = (0, import_smithy_client.map)({
-    $metadata: deserializeMetadata(output)
+    $metadata: deserializeMetadata(output),
+    [_SSE]: [, output.headers[_xasse]],
+    [_SSEKMSKI]: [, output.headers[_xasseakki]],
+    [_SSEKMSEC]: [, output.headers[_xassec]],
+    [_BKE]: [() => void 0 !== output.headers[_xassebke], () => (0, import_smithy_client.parseBoolean)(output.headers[_xassebke])]
   });
   const data = (0, import_smithy_client.expectNonNull)((0, import_smithy_client.expectObject)(await (0, import_core.parseXmlBody)(output.body, context)), "body");
   if (data[_C] != null) {
@@ -8404,7 +8420,7 @@ var _CreateSessionCommand = class _CreateSessionCommand extends import_smithy_cl
     (0, import_middleware_endpoint.getEndpointPlugin)(config, Command.getEndpointParameterInstructions()),
     (0, import_middleware_sdk_s3.getThrow200ExceptionsPlugin)(config)
   ];
-}).s("AmazonS3", "CreateSession", {}).n("S3Client", "CreateSessionCommand").f(void 0, CreateSessionOutputFilterSensitiveLog).ser(se_CreateSessionCommand).de(de_CreateSessionCommand).build() {
+}).s("AmazonS3", "CreateSession", {}).n("S3Client", "CreateSessionCommand").f(CreateSessionRequestFilterSensitiveLog, CreateSessionOutputFilterSensitiveLog).ser(se_CreateSessionCommand).de(de_CreateSessionCommand).build() {
 };
 __name(_CreateSessionCommand, "CreateSessionCommand");
 var CreateSessionCommand = _CreateSessionCommand;
@@ -10909,6 +10925,7 @@ var waitUntilObjectNotExists = /* @__PURE__ */ __name(async (params, input) => {
   CreateMultipartUploadRequestFilterSensitiveLog,
   SessionCredentialsFilterSensitiveLog,
   CreateSessionOutputFilterSensitiveLog,
+  CreateSessionRequestFilterSensitiveLog,
   ServerSideEncryptionByDefaultFilterSensitiveLog,
   ServerSideEncryptionRuleFilterSensitiveLog,
   ServerSideEncryptionConfigurationFilterSensitiveLog,

package/node_modules/@aws-sdk/client-s3/dist-es/commands/CreateSessionCommand.js

@@ -3,7 +3,7 @@ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
 import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CreateSessionOutputFilterSensitiveLog } from "../models/models_0";
+import { CreateSessionOutputFilterSensitiveLog, CreateSessionRequestFilterSensitiveLog, } from "../models/models_0";
 import { de_CreateSessionCommand, se_CreateSessionCommand } from "../protocols/Aws_restXml";
 export { $Command };
 export class CreateSessionCommand extends $Command
@@ -22,7 +22,7 @@ export class CreateSessionCommand extends $Command
 })
     .s("AmazonS3", "CreateSession", {})
     .n("S3Client", "CreateSessionCommand")
-    .f(void 0, CreateSessionOutputFilterSensitiveLog)
+    .f(CreateSessionRequestFilterSensitiveLog, CreateSessionOutputFilterSensitiveLog)
     .ser(se_CreateSessionCommand)
     .de(de_CreateSessionCommand)
     .build() {

package/node_modules/@aws-sdk/client-s3/dist-es/models/models_0.js

@@ -510,8 +510,15 @@ export const SessionCredentialsFilterSensitiveLog = (obj) => ({
 });
 export const CreateSessionOutputFilterSensitiveLog = (obj) => ({
     ...obj,
+    ...(obj.SSEKMSKeyId && { SSEKMSKeyId: SENSITIVE_STRING }),
+    ...(obj.SSEKMSEncryptionContext && { SSEKMSEncryptionContext: SENSITIVE_STRING }),
     ...(obj.Credentials && { Credentials: SessionCredentialsFilterSensitiveLog(obj.Credentials) }),
 });
+export const CreateSessionRequestFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.SSEKMSKeyId && { SSEKMSKeyId: SENSITIVE_STRING }),
+    ...(obj.SSEKMSEncryptionContext && { SSEKMSEncryptionContext: SENSITIVE_STRING }),
+});
 export const ServerSideEncryptionByDefaultFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.KMSMasterKeyID && { KMSMasterKeyID: SENSITIVE_STRING }),

package/node_modules/@aws-sdk/client-s3/dist-es/protocols/Aws_restXml.js

@@ -189,6 +189,10 @@ export const se_CreateSessionCommand = async (input, context) => {
     const b = rb(input, context);
     const headers = map({}, isSerializableHeaderValue, {
         [_xacsm]: input[_SM],
+        [_xasse]: input[_SSE],
+        [_xasseakki]: input[_SSEKMSKI],
+        [_xassec]: input[_SSEKMSEC],
+        [_xassebke]: [() => isSerializableHeaderValue(input[_BKE]), () => input[_BKE].toString()],
     });
     b.bp("/");
     b.p("Bucket", () => input.Bucket, "{Bucket}", false);
@@ -2141,6 +2145,10 @@ export const de_CreateSessionCommand = async (output, context) => {
     }
     const contents = map({
         $metadata: deserializeMetadata(output),
+        [_SSE]: [, output.headers[_xasse]],
+        [_SSEKMSKI]: [, output.headers[_xasseakki]],
+        [_SSEKMSEC]: [, output.headers[_xassec]],
+        [_BKE]: [() => void 0 !== output.headers[_xassebke], () => __parseBoolean(output.headers[_xassebke])],
     });
     const data = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
     if (data[_C] != null) {

package/node_modules/@aws-sdk/client-s3/dist-types/commands/AbortMultipartUploadCommand.d.ts

@@ -161,4 +161,15 @@ declare const AbortMultipartUploadCommand_base: {
  *
  */
 export declare class AbortMultipartUploadCommand extends AbortMultipartUploadCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: AbortMultipartUploadRequest;
+            output: AbortMultipartUploadOutput;
+        };
+        sdk: {
+            input: AbortMultipartUploadCommandInput;
+            output: AbortMultipartUploadCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/CompleteMultipartUploadCommand.d.ts

@@ -77,6 +77,11 @@ declare const CompleteMultipartUploadCommand_base: {
  *                         information about permissions required to use the multipart upload API, see
  *                            <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart Upload and
  *                            Permissions</a> in the <i>Amazon S3 User Guide</i>.</p>
+ *                      <p>If you provide an <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html">additional checksum
+ *                         value</a> in your <code>MultipartUpload</code> requests and the
+ *                         object is encrypted with Key Management Service, you must have permission to use the
+ *                         <code>kms:Decrypt</code> action for the
+ *                         <code>CompleteMultipartUpload</code> request to succeed.</p>
  *                   </li>
  *                   <li>
  *                      <p>
@@ -86,13 +91,9 @@ declare const CompleteMultipartUploadCommand_base: {
  * Amazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html">
  *                            <code>CreateSession</code>
  *                         </a>.</p>
- *                   </li>
- *                   <li>
- *                      <p> If you provide an <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html">additional checksum
- *                            value</a> in your <code>MultipartUpload</code> requests and the
- *                         object is encrypted with Key Management Service, you must have permission to use the
- *                            <code>kms:Decrypt</code> action for the
- *                            <code>CompleteMultipartUpload</code> request to succeed.</p>
+ *                      <p>If the object is encrypted with
+ *                         SSE-KMS, you must also have the
+ *                         <code>kms:GenerateDataKey</code> and <code>kms:Decrypt</code> permissions in IAM identity-based policies and KMS key policies for the KMS key.</p>
  *                   </li>
  *                </ul>
  *             </dd>
@@ -289,4 +290,15 @@ declare const CompleteMultipartUploadCommand_base: {
  *
  */
 export declare class CompleteMultipartUploadCommand extends CompleteMultipartUploadCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CompleteMultipartUploadRequest;
+            output: CompleteMultipartUploadOutput;
+        };
+        sdk: {
+            input: CompleteMultipartUploadCommandInput;
+            output: CompleteMultipartUploadCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/CopyObjectCommand.d.ts

@@ -124,6 +124,9 @@ declare const CopyObjectCommand_base: {
  *                               key can't be set to <code>ReadOnly</code> on the copy destination bucket. </p>
  *                         </li>
  *                      </ul>
+ *                      <p>If the object is encrypted with
+ *                         SSE-KMS, you must also have the
+ *                         <code>kms:GenerateDataKey</code> and <code>kms:Decrypt</code> permissions in IAM identity-based policies and KMS key policies for the KMS key.</p>
  *                      <p>For example policies, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html">Example bucket policies for S3 Express One Zone</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-identity-policies.html">Amazon Web Services Identity and Access Management (IAM) identity-based policies for S3 Express One Zone</a> in the
  *                            <i>Amazon S3 User Guide</i>.</p>
  *                   </li>
@@ -310,4 +313,15 @@ declare const CopyObjectCommand_base: {
  *
  */
 export declare class CopyObjectCommand extends CopyObjectCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CopyObjectRequest;
+            output: CopyObjectOutput;
+        };
+        sdk: {
+            input: CopyObjectCommandInput;
+            output: CopyObjectCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/CreateBucketCommand.d.ts

@@ -253,4 +253,15 @@ declare const CreateBucketCommand_base: {
  *
  */
 export declare class CreateBucketCommand extends CreateBucketCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateBucketRequest;
+            output: CreateBucketOutput;
+        };
+        sdk: {
+            input: CreateBucketCommandInput;
+            output: CreateBucketCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/CreateMultipartUploadCommand.d.ts

@@ -208,7 +208,27 @@ declare const CreateMultipartUploadCommand_base: {
  *                   </li>
  *                   <li>
  *                      <p>
- *                         <b>Directory buckets</b> -For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>
+ *                         <b>Directory buckets</b> - For directory buckets, there are only two supported options for server-side encryption: server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) and server-side encryption with KMS keys (SSE-KMS) (<code>aws:kms</code>). We recommend that the bucket's default encryption uses the desired encryption configuration and you don't override the bucket default encryption in your
+ *             <code>CreateSession</code> requests or <code>PUT</code> object requests. Then, new objects
+ *  are automatically encrypted with the desired encryption settings. For more
+ *          information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-serv-side-encryption.html">Protecting data with server-side encryption</a> in the <i>Amazon S3 User Guide</i>. For more information about the encryption overriding behaviors in directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-specifying-kms-encryption.html">Specifying server-side encryption with KMS for new object uploads</a>.</p>
+ *                      <p>In the Zonal endpoint API calls (except <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html">UploadPartCopy</a>) using the REST API, the encryption request headers must match the encryption settings that are specified in the <code>CreateSession</code> request.
+ *                             You can't override the values of the encryption settings (<code>x-amz-server-side-encryption</code>, <code>x-amz-server-side-encryption-aws-kms-key-id</code>, <code>x-amz-server-side-encryption-context</code>, and <code>x-amz-server-side-encryption-bucket-key-enabled</code>) that are specified in the <code>CreateSession</code> request.
+ *                             You don't need to explicitly specify these encryption settings values in Zonal endpoint API calls, and
+ *                             Amazon S3 will use the encryption settings values from the <code>CreateSession</code> request to protect new objects in the directory bucket.
+ *                            </p>
+ *                      <note>
+ *                         <p>When you use the CLI or the Amazon Web Services SDKs, for <code>CreateSession</code>, the session token refreshes automatically to avoid service interruptions when a session expires. The CLI or the Amazon Web Services SDKs use the bucket's default encryption configuration for the
+ *                             <code>CreateSession</code> request. It's not supported to override the encryption settings values in the <code>CreateSession</code> request.
+ *                             So in the Zonal endpoint API calls (except <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html">UploadPartCopy</a>),
+ *           the encryption request headers must match the default encryption configuration of the directory bucket.
+ *
+ * </p>
+ *                      </note>
+ *                      <note>
+ *                         <p>For directory buckets, when you perform a <code>CreateMultipartUpload</code> operation and an <code>UploadPartCopy</code> operation,
+ *                         the request headers you provide in the <code>CreateMultipartUpload</code> request must match the default encryption configuration of the destination bucket. </p>
+ *                      </note>
  *                   </li>
  *                </ul>
  *             </dd>
@@ -338,4 +358,15 @@ declare const CreateMultipartUploadCommand_base: {
  *
  */
 export declare class CreateMultipartUploadCommand extends CreateMultipartUploadCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateMultipartUploadRequest;
+            output: CreateMultipartUploadOutput;
+        };
+        sdk: {
+            input: CreateMultipartUploadCommandInput;
+            output: CreateMultipartUploadCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/CreateSessionCommand.d.ts

@@ -27,8 +27,8 @@ declare const CreateSessionCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Creates a session that establishes temporary security credentials to support fast authentication and authorization for the Zonal endpoint APIs on directory buckets.
- *          For more information about Zonal endpoint APIs that include the Availability Zone in the request endpoint, see
+ * <p>Creates a session that establishes temporary security credentials to support fast authentication and authorization for the Zonal endpoint API operations on directory buckets.
+ *          For more information about Zonal endpoint API operations that include the Availability Zone in the request endpoint, see
  *          <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-APIs.html">S3 Express One Zone  APIs</a> in the <i>Amazon S3 User Guide</i>.
  *       </p>
  *          <p>To make Zonal endpoint API requests on a directory bucket, use the <code>CreateSession</code>
@@ -36,7 +36,7 @@ declare const CreateSessionCommand_base: {
  *          bucket in a bucket policy or an IAM identity-based policy. Then, you use IAM credentials to make the
  *             <code>CreateSession</code> API request on the bucket, which returns temporary security
  *          credentials that include the access key ID, secret access key, session token, and
- *          expiration. These credentials have associated permissions to access the Zonal endpoint APIs. After
+ *          expiration. These credentials have associated permissions to access the Zonal endpoint API operations. After
  *          the session is created, you don’t need to use other policies to grant permissions to each
  *          Zonal endpoint API individually. Instead, in your Zonal endpoint API requests, you sign your requests by
  *          applying the temporary security credentials of the session to the request headers and
@@ -60,12 +60,12 @@ declare const CreateSessionCommand_base: {
  *                <li>
  *                   <p>
  *                      <b>
- *                         <code>CopyObject</code> API operation</b> - Unlike other Zonal endpoint APIs, the <code>CopyObject</code> API operation doesn't use the temporary security credentials returned from the <code>CreateSession</code> API operation for authentication and authorization. For information about authentication and authorization of the <code>CopyObject</code> API operation on directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a>.</p>
+ *                         <code>CopyObject</code> API operation</b> - Unlike other Zonal endpoint API operations, the <code>CopyObject</code> API operation doesn't use the temporary security credentials returned from the <code>CreateSession</code> API operation for authentication and authorization. For information about authentication and authorization of the <code>CopyObject</code> API operation on directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a>.</p>
  *                </li>
  *                <li>
  *                   <p>
  *                      <b>
- *                         <code>HeadBucket</code> API operation</b> - Unlike other Zonal endpoint APIs, the <code>HeadBucket</code> API operation doesn't use the temporary security credentials returned from the <code>CreateSession</code> API operation for authentication and authorization. For information about authentication and authorization of the <code>HeadBucket</code> API operation on directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadBucket.html">HeadBucket</a>.</p>
+ *                         <code>HeadBucket</code> API operation</b> - Unlike other Zonal endpoint API operations, the <code>HeadBucket</code> API operation doesn't use the temporary security credentials returned from the <code>CreateSession</code> API operation for authentication and authorization. For information about authentication and authorization of the <code>HeadBucket</code> API operation on directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadBucket.html">HeadBucket</a>.</p>
  *                </li>
  *             </ul>
  *          </note>
@@ -82,7 +82,37 @@ declare const CreateSessionCommand_base: {
  *                   </a>. For example policies, see
  *                      <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html">Example bucket policies for S3 Express One Zone</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-identity-policies.html">Amazon Web Services Identity and Access Management (IAM) identity-based policies for S3 Express One Zone</a> in the
  *                      <i>Amazon S3 User Guide</i>. </p>
- *                <p>To grant cross-account access to Zonal endpoint APIs, the bucket policy should also grant both accounts the <code>s3express:CreateSession</code> permission.</p>
+ *                <p>To grant cross-account access to Zonal endpoint API operations, the bucket policy should also grant both accounts the <code>s3express:CreateSession</code> permission.</p>
+ *                <p>If you want to encrypt objects with SSE-KMS, you must also have the <code>kms:GenerateDataKey</code> and the <code>kms:Decrypt</code> permissions in IAM identity-based policies and KMS key policies for the target KMS key.</p>
+ *             </dd>
+ *             <dt>Encryption</dt>
+ *             <dd>
+ *                <p>For directory buckets, there are only two supported options for server-side encryption: server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) and server-side encryption with KMS keys (SSE-KMS) (<code>aws:kms</code>). We recommend that the bucket's default encryption uses the desired encryption configuration and you don't override the bucket default encryption in your
+ *             <code>CreateSession</code> requests or <code>PUT</code> object requests. Then, new objects
+ *  are automatically encrypted with the desired encryption settings. For more
+ *          information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-serv-side-encryption.html">Protecting data with server-side encryption</a> in the <i>Amazon S3 User Guide</i>. For more information about the encryption overriding behaviors in directory buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-specifying-kms-encryption.html">Specifying server-side encryption with KMS for new object uploads</a>.</p>
+ *                <p>For <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-differences.html#s3-express-differences-api-operations">Zonal endpoint (object-level) API operations</a> except <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html">UploadPartCopy</a>,
+ * you authenticate and authorize requests through <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html">CreateSession</a> for low latency.
+ *                             To encrypt new objects in a directory bucket with SSE-KMS, you must specify SSE-KMS as the directory bucket's default encryption configuration with a KMS key (specifically, a <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk">customer managed key</a>). Then, when a session is created for Zonal endpoint API operations, new objects are automatically encrypted and decrypted with SSE-KMS and S3 Bucket Keys during the session.</p>
+ *                <note>
+ *                   <p>
+ *                             Only 1 <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk">customer managed key</a> is supported per directory bucket for the lifetime of the bucket. <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk">Amazon Web Services managed key</a> (<code>aws/s3</code>) isn't supported.
+ *                             After you specify SSE-KMS as your bucket's default encryption configuration with a customer managed key, you can't change the customer managed key for the bucket's SSE-KMS configuration.
+ *                             </p>
+ *                </note>
+ *                <p>In the Zonal endpoint API calls (except <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html">UploadPartCopy</a>) using the REST API,
+ *                             you can't override the values of the encryption settings (<code>x-amz-server-side-encryption</code>, <code>x-amz-server-side-encryption-aws-kms-key-id</code>, <code>x-amz-server-side-encryption-context</code>, and <code>x-amz-server-side-encryption-bucket-key-enabled</code>) from the <code>CreateSession</code> request.
+ *                             You don't need to explicitly specify these encryption settings values in Zonal endpoint API calls, and
+ *                             Amazon S3 will use the encryption settings values from the <code>CreateSession</code> request to protect new objects in the directory bucket.
+ *                            </p>
+ *                <note>
+ *                   <p>When you use the CLI or the Amazon Web Services SDKs, for <code>CreateSession</code>, the session token refreshes automatically to avoid service interruptions when a session expires. The CLI or the Amazon Web Services SDKs use the bucket's default encryption configuration for the
+ *                             <code>CreateSession</code> request. It's not supported to override the encryption settings values in the <code>CreateSession</code> request.
+ *                             Also, in the Zonal endpoint API calls (except <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html">CopyObject</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html">UploadPartCopy</a>),
+ *           it's not supported to override the values of the encryption settings from the <code>CreateSession</code> request.
+ *
+ * </p>
+ *                </note>
  *             </dd>
  *             <dt>HTTP Host header syntax</dt>
  *             <dd>
@@ -100,10 +130,18 @@ declare const CreateSessionCommand_base: {
  * const input = { // CreateSessionRequest
  *   SessionMode: "ReadOnly" || "ReadWrite",
  *   Bucket: "STRING_VALUE", // required
+ *   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
+ *   SSEKMSKeyId: "STRING_VALUE",
+ *   SSEKMSEncryptionContext: "STRING_VALUE",
+ *   BucketKeyEnabled: true || false,
  * };
  * const command = new CreateSessionCommand(input);
  * const response = await client.send(command);
  * // { // CreateSessionOutput
+ * //   ServerSideEncryption: "AES256" || "aws:kms" || "aws:kms:dsse",
+ * //   SSEKMSKeyId: "STRING_VALUE",
+ * //   SSEKMSEncryptionContext: "STRING_VALUE",
+ * //   BucketKeyEnabled: true || false,
  * //   Credentials: { // SessionCredentials
  * //     AccessKeyId: "STRING_VALUE", // required
  * //     SecretAccessKey: "STRING_VALUE", // required
@@ -129,4 +167,15 @@ declare const CreateSessionCommand_base: {
  * @public
  */
 export declare class CreateSessionCommand extends CreateSessionCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateSessionRequest;
+            output: CreateSessionOutput;
+        };
+        sdk: {
+            input: CreateSessionCommandInput;
+            output: CreateSessionCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteBucketAnalyticsConfigurationCommand.d.ts

@@ -87,4 +87,15 @@ declare const DeleteBucketAnalyticsConfigurationCommand_base: {
  * @public
  */
 export declare class DeleteBucketAnalyticsConfigurationCommand extends DeleteBucketAnalyticsConfigurationCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: DeleteBucketAnalyticsConfigurationRequest;
+            output: {};
+        };
+        sdk: {
+            input: DeleteBucketAnalyticsConfigurationCommandInput;
+            output: DeleteBucketAnalyticsConfigurationCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteBucketCommand.d.ts

@@ -116,4 +116,15 @@ declare const DeleteBucketCommand_base: {
  *
  */
 export declare class DeleteBucketCommand extends DeleteBucketCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: DeleteBucketRequest;
+            output: {};
+        };
+        sdk: {
+            input: DeleteBucketCommandInput;
+            output: DeleteBucketCommandOutput;
+        };
+    };
 }

package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteBucketCorsCommand.d.ts

@@ -90,4 +90,15 @@ declare const DeleteBucketCorsCommand_base: {
  *
  */
 export declare class DeleteBucketCorsCommand extends DeleteBucketCorsCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: DeleteBucketCorsRequest;
+            output: {};
+        };
+        sdk: {
+            input: DeleteBucketCorsCommandInput;
+            output: DeleteBucketCorsCommandOutput;
+        };
+    };
 }