@nocobase/plugin-file-manager 0.17.0-alpha.7 → 0.18.0-alpha.2

package/dist/node_modules/@aws-sdk/client-s3/dist-types/models/models_1.d.ts

@@ -1,60 +1,1168 @@
-/// <reference types="node" />
 import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { Readable } from "stream";
-import { ChecksumAlgorithm, Grant, ObjectCannedACL, ObjectLockConfiguration, ObjectLockLegalHoldStatus, ObjectLockMode, ObjectLockRetention, PublicAccessBlockConfiguration, ReplicationStatus, RequestCharged, RequestPayer, ServerSideEncryption, StorageClass, Tagging } from "./models_0";
+import { StreamingBlobTypes } from "@smithy/types";
+import { AccessControlPolicy, BucketVersioningStatus, ChecksumAlgorithm, ErrorDocument, Grant, IndexDocument, ObjectCannedACL, ObjectLockConfiguration, ObjectLockLegalHold, ObjectLockLegalHoldStatus, ObjectLockMode, ObjectLockRetention, Payer, PublicAccessBlockConfiguration, RedirectAllRequestsTo, ReplicationConfiguration, ReplicationStatus, RequestCharged, RequestPayer, RoutingRule, ServerSideEncryption, StorageClass, Tag } from "./models_0";
 import { S3ServiceException as __BaseException } from "./S3ServiceException";
+/**
+ * @public
+ */
+export interface PutBucketReplicationRequest {
+    /**
+     * @public
+     * <p>The name of the bucket</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the data. You must use this header as a message
+     *          integrity check to verify that the request body was not corrupted in transit. For more
+     *          information, see <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC 1864</a>.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>A container for replication rules. You can add up to 1,000 rules. The maximum size of a
+     *          replication configuration is 2 MB.</p>
+     */
+    ReplicationConfiguration: ReplicationConfiguration | undefined;
+    /**
+     * @public
+     * <p>A token to allow Object Lock to be enabled for an existing bucket.</p>
+     */
+    Token?: string;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ * <p>Container for Payer.</p>
+ */
+export interface RequestPaymentConfiguration {
+    /**
+     * @public
+     * <p>Specifies who pays for the download and request fees.</p>
+     */
+    Payer: Payer | undefined;
+}
+/**
+ * @public
+ */
+export interface PutBucketRequestPaymentRequest {
+    /**
+     * @public
+     * <p>The bucket name.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the data. You must use this header as a message
+     *          integrity check to verify that the request body was not corrupted in transit. For more
+     *          information, see <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC 1864</a>.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>Container for Payer.</p>
+     */
+    RequestPaymentConfiguration: RequestPaymentConfiguration | undefined;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ * <p>Container for <code>TagSet</code> elements.</p>
+ */
+export interface Tagging {
+    /**
+     * @public
+     * <p>A collection for a set of tags</p>
+     */
+    TagSet: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface PutBucketTaggingRequest {
+    /**
+     * @public
+     * <p>The bucket name.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the data. You must use this header as a message
+     *          integrity check to verify that the request body was not corrupted in transit. For more
+     *          information, see <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC 1864</a>.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>Container for the <code>TagSet</code> and <code>Tag</code> elements.</p>
+     */
+    Tagging: Tagging | undefined;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const MFADelete: {
+    readonly Disabled: "Disabled";
+    readonly Enabled: "Enabled";
+};
+/**
+ * @public
+ */
+export type MFADelete = (typeof MFADelete)[keyof typeof MFADelete];
+/**
+ * @public
+ * <p>Describes the versioning state of an Amazon S3 bucket. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTVersioningStatus.html">PUT
+ *             Bucket versioning</a> in the <i>Amazon S3 API Reference</i>.</p>
+ */
+export interface VersioningConfiguration {
+    /**
+     * @public
+     * <p>Specifies whether MFA delete is enabled in the bucket versioning configuration. This
+     *          element is only returned if the bucket has been configured with MFA delete. If the bucket
+     *          has never been so configured, this element is not returned.</p>
+     */
+    MFADelete?: MFADelete;
+    /**
+     * @public
+     * <p>The versioning state of the bucket.</p>
+     */
+    Status?: BucketVersioningStatus;
+}
+/**
+ * @public
+ */
+export interface PutBucketVersioningRequest {
+    /**
+     * @public
+     * <p>The bucket name.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>>The base64-encoded 128-bit MD5 digest of the data. You must use this header as a
+     *          message integrity check to verify that the request body was not corrupted in transit. For
+     *          more information, see <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC
+     *          1864</a>.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>The concatenation of the authentication device's serial number, a space, and the value
+     *          that is displayed on your authentication device.</p>
+     */
+    MFA?: string;
+    /**
+     * @public
+     * <p>Container for setting the versioning state.</p>
+     */
+    VersioningConfiguration: VersioningConfiguration | undefined;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ * <p>Specifies website configuration parameters for an Amazon S3 bucket.</p>
+ */
+export interface WebsiteConfiguration {
+    /**
+     * @public
+     * <p>The name of the error document for the website.</p>
+     */
+    ErrorDocument?: ErrorDocument;
+    /**
+     * @public
+     * <p>The name of the index document for the website.</p>
+     */
+    IndexDocument?: IndexDocument;
+    /**
+     * @public
+     * <p>The redirect behavior for every request to this bucket's website endpoint.</p>
+     *          <important>
+     *             <p>If you specify this property, you can't specify any other property.</p>
+     *          </important>
+     */
+    RedirectAllRequestsTo?: RedirectAllRequestsTo;
+    /**
+     * @public
+     * <p>Rules that define when a redirect is applied and the redirect behavior.</p>
+     */
+    RoutingRules?: RoutingRule[];
+}
+/**
+ * @public
+ */
+export interface PutBucketWebsiteRequest {
+    /**
+     * @public
+     * <p>The bucket name.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the data. You must use this header as a message
+     *          integrity check to verify that the request body was not corrupted in transit. For more
+     *          information, see <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC 1864</a>.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>Container for the request.</p>
+     */
+    WebsiteConfiguration: WebsiteConfiguration | undefined;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ */
+export interface PutObjectOutput {
+    /**
+     * @public
+     * <p>If the expiration is configured for the object (see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html">PutBucketLifecycleConfiguration</a>) in the <i>Amazon S3 User Guide</i>, the response includes this header. It
+     *          includes the <code>expiry-date</code> and <code>rule-id</code> key-value pairs that provide
+     *          information about object expiration. The value of the <code>rule-id</code> is
+     *          URL-encoded.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    Expiration?: string;
+    /**
+     * @public
+     * <p>Entity tag for the uploaded object.</p>
+     *          <p>
+     *             <b>General purpose buckets </b> - To ensure that data is not corrupted traversing the network,
+     *          for objects where the
+     *          ETag is the MD5 digest of the object, you can calculate the MD5 while putting an object to Amazon S3 and compare the returned ETag to
+     *       the calculated MD5 value.</p>
+     *          <p>
+     *             <b>Directory buckets </b> - The ETag for the object in a directory bucket isn't the MD5 digest of the object.</p>
+     */
+    ETag?: string;
+    /**
+     * @public
+     * <p>The base64-encoded, 32-bit CRC32 checksum of the object. This will only be present if it was uploaded
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+     *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+     *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumCRC32?: string;
+    /**
+     * @public
+     * <p>The base64-encoded, 32-bit CRC32C checksum of the object. This will only be present if it was uploaded
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+     *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+     *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumCRC32C?: string;
+    /**
+     * @public
+     * <p>The base64-encoded, 160-bit SHA-1 digest of the object. This will only be present if it was uploaded
+     *     with the object. When you use the API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+     *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+     *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumSHA1?: string;
+    /**
+     * @public
+     * <p>The base64-encoded, 256-bit SHA-256 digest of the object. This will only be present if it was uploaded
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
+     *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
+     *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumSHA256?: string;
+    /**
+     * @public
+     * <p>The server-side encryption algorithm used when you store this object in Amazon S3 (for example,
+     *             <code>AES256</code>, <code>aws:kms</code>, <code>aws:kms:dsse</code>).</p>
+     *          <note>
+     *             <p>For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>
+     *          </note>
+     */
+    ServerSideEncryption?: ServerSideEncryption;
+    /**
+     * @public
+     * <p>Version ID of the object.</p>
+     *          <p>If you enable versioning for a bucket, Amazon S3 automatically generates a unique version ID
+     *          for the object being stored. Amazon S3 returns this ID in the response. When you enable
+     *          versioning for a bucket, if Amazon S3 receives multiple write requests for the same object
+     *          simultaneously, it stores all of the objects. For more information about versioning, see
+     *          <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/AddingObjectstoVersioningEnabledBuckets.html">Adding Objects to
+     *             Versioning-Enabled Buckets</a> in the <i>Amazon S3
+     *                User Guide</i>. For information about returning the versioning state
+     *          of a bucket, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html">GetBucketVersioning</a>. </p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    VersionId?: string;
+    /**
+     * @public
+     * <p>If server-side encryption with a customer-provided encryption key was requested, the
+     *          response will include this header to confirm the encryption algorithm that's used.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSECustomerAlgorithm?: string;
+    /**
+     * @public
+     * <p>If server-side encryption with a customer-provided encryption key was requested, the
+     *          response will include this header to provide the round-trip message integrity verification of
+     *          the customer-provided encryption key.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSECustomerKeyMD5?: string;
+    /**
+     * @public
+     * <p>If <code>x-amz-server-side-encryption</code> has a valid value of <code>aws:kms</code>
+     *          or <code>aws:kms:dsse</code>, this header indicates the ID of the Key Management Service (KMS)
+     *          symmetric encryption customer managed key that was used for the object. </p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSEKMSKeyId?: string;
+    /**
+     * @public
+     * <p>If present, indicates the Amazon Web Services KMS Encryption Context to use for object encryption. The
+     *          value of this header is a base64-encoded UTF-8 string holding JSON with the encryption
+     *          context key-value pairs. This value is stored as object metadata and automatically gets
+     *          passed on to Amazon Web Services KMS for future <code>GetObject</code> or <code>CopyObject</code>
+     *          operations on this object.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSEKMSEncryptionContext?: string;
+    /**
+     * @public
+     * <p>Indicates whether the uploaded object uses an S3 Bucket Key for server-side encryption
+     *          with Key Management Service (KMS) keys (SSE-KMS).</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    BucketKeyEnabled?: boolean;
+    /**
+     * @public
+     * <p>If present, indicates that the requester was successfully charged for the
+     *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestCharged?: RequestCharged;
+}
+/**
+ * @public
+ */
+export interface PutObjectRequest {
+    /**
+     * @public
+     * <p>The canned ACL to apply to the object. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#CannedACL">Canned
+     *          ACL</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>When adding a new object, you can use headers to grant ACL-based permissions to
+     *          individual Amazon Web Services accounts or to predefined groups defined by Amazon S3. These permissions are
+     *          then added to the ACL on the object. By default, all objects are private. Only the owner
+     *          has full access control. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html">Access Control List (ACL) Overview</a>
+     *          and <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-using-rest-api.html">Managing
+     *             ACLs Using the REST API</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If the bucket that you're uploading objects to uses the bucket owner enforced setting
+     *          for S3 Object Ownership, ACLs are disabled and no longer affect permissions. Buckets that
+     *          use this setting only accept PUT requests that don't specify an ACL or PUT requests that
+     *          specify bucket owner full control ACLs, such as the <code>bucket-owner-full-control</code>
+     *          canned ACL or an equivalent form of this ACL expressed in the XML format. PUT requests that
+     *          contain other ACLs (for example, custom grants to certain Amazon Web Services accounts) fail and return a
+     *          <code>400</code> error with the error code <code>AccessControlListNotSupported</code>.
+     *          For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html"> Controlling ownership of
+     *             objects and disabling ACLs</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>This functionality is not supported for directory buckets.</p>
+     *                </li>
+     *                <li>
+     *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    ACL?: ObjectCannedACL;
+    /**
+     * @public
+     * <p>Object data.</p>
+     */
+    Body?: StreamingBlobTypes;
+    /**
+     * @public
+     * <p>The bucket name to which the PUT action was initiated. </p>
+     *          <p>
+     *             <b>Directory buckets</b> - When you use this operation with a directory bucket, you must use virtual-hosted-style requests in the format <code>
+     *                <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>. Path-style requests are not supported.  Directory bucket names must be unique in the chosen Availability Zone. Bucket names must follow the format <code>
+     *                <i>bucket_base_name</i>--<i>az-id</i>--x-s3</code> (for example, <code>
+     *                <i>DOC-EXAMPLE-BUCKET</i>--<i>usw2-az2</i>--x-s3</code>). For information about bucket naming
+     *          restrictions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-naming-rules.html">Directory bucket naming
+     *             rules</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>Access points and Object Lambda access points are not supported by directory buckets.</p>
+     *          </note>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>Can be used to specify caching behavior along the request/reply chain. For more
+     *          information, see <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9">http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9</a>.</p>
+     */
+    CacheControl?: string;
+    /**
+     * @public
+     * <p>Specifies presentational information for the object. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc6266#section-4">https://www.rfc-editor.org/rfc/rfc6266#section-4</a>.</p>
+     */
+    ContentDisposition?: string;
+    /**
+     * @public
+     * <p>Specifies what content encodings have been applied to the object and thus what decoding
+     *          mechanisms must be applied to obtain the media-type referenced by the Content-Type header
+     *          field. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc9110.html#field.content-encoding">https://www.rfc-editor.org/rfc/rfc9110.html#field.content-encoding</a>.</p>
+     */
+    ContentEncoding?: string;
+    /**
+     * @public
+     * <p>The language the content is in.</p>
+     */
+    ContentLanguage?: string;
+    /**
+     * @public
+     * <p>Size of the body in bytes. This parameter is useful when the size of the body cannot be
+     *          determined automatically. For more information, see <a href="https://www.rfc-editor.org/rfc/rfc9110.html#name-content-length">https://www.rfc-editor.org/rfc/rfc9110.html#name-content-length</a>.</p>
+     */
+    ContentLength?: number;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the message (without the headers) according to
+     *          RFC 1864. This header can be used as a message integrity check to verify that the data is
+     *          the same data that was originally sent. Although it is optional, we recommend using the
+     *          Content-MD5 mechanism as an end-to-end integrity check. For more information about REST
+     *          request authentication, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html">REST Authentication</a>.</p>
+     *          <note>
+     *             <p>The <code>Content-MD5</code> header is required for any request to upload an
+     *          object with a retention period configured using Amazon S3 Object Lock. For more
+     *          information about Amazon S3 Object Lock, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock-overview.html">Amazon S3 Object Lock
+     *             Overview</a> in the <i>Amazon S3 User Guide</i>. </p>
+     *          </note>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>A standard MIME type describing the format of the contents. For more information, see
+     *             <a href="https://www.rfc-editor.org/rfc/rfc9110.html#name-content-type">https://www.rfc-editor.org/rfc/rfc9110.html#name-content-type</a>.</p>
+     */
+    ContentType?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum-<i>algorithm</i>
+     *             </code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>.</p>
+     *          <p>For the <code>x-amz-checksum-<i>algorithm</i>
+     *             </code> header, replace <code>
+     *                <i>algorithm</i>
+     *             </code> with the supported algorithm from the following list: </p>
+     *          <ul>
+     *             <li>
+     *                <p>CRC32</p>
+     *             </li>
+     *             <li>
+     *                <p>CRC32C</p>
+     *             </li>
+     *             <li>
+     *                <p>SHA1</p>
+     *             </li>
+     *             <li>
+     *                <p>SHA256</p>
+     *             </li>
+     *          </ul>
+     *          <p>For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If the individual checksum value you provide through <code>x-amz-checksum-<i>algorithm</i>
+     *             </code> doesn't match the checksum algorithm you set through <code>x-amz-sdk-checksum-algorithm</code>,  Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter and uses the checksum algorithm that matches the provided value in <code>x-amz-checksum-<i>algorithm</i>
+     *             </code>.</p>
+     *          <note>
+     *             <p>For directory buckets, when you use Amazon Web Services SDKs, <code>CRC32</code> is the default checksum algorithm that's used for performance.</p>
+     *          </note>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+     *     This header specifies the base64-encoded, 32-bit CRC32 checksum of the object. For more information, see
+     *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+     *     <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumCRC32?: string;
+    /**
+     * @public
+     * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+     *     This header specifies the base64-encoded, 32-bit CRC32C checksum of the object. For more information, see
+     *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+     *     <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumCRC32C?: string;
+    /**
+     * @public
+     * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+     *     This header specifies the base64-encoded, 160-bit SHA-1 digest of the object. For more information, see
+     *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+     *     <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumSHA1?: string;
+    /**
+     * @public
+     * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
+     *     This header specifies the base64-encoded, 256-bit SHA-256 digest of the object. For more information, see
+     *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
+     *     <i>Amazon S3 User Guide</i>.</p>
+     */
+    ChecksumSHA256?: string;
+    /**
+     * @public
+     * <p>The date and time at which the object is no longer cacheable. For more information, see
+     *             <a href="https://www.rfc-editor.org/rfc/rfc7234#section-5.3">https://www.rfc-editor.org/rfc/rfc7234#section-5.3</a>.</p>
+     */
+    Expires?: Date;
+    /**
+     * @public
+     * <p>Gives the grantee READ, READ_ACP, and WRITE_ACP permissions on the object.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>This functionality is not supported for directory buckets.</p>
+     *                </li>
+     *                <li>
+     *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    GrantFullControl?: string;
+    /**
+     * @public
+     * <p>Allows grantee to read the object data and its metadata.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>This functionality is not supported for directory buckets.</p>
+     *                </li>
+     *                <li>
+     *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    GrantRead?: string;
+    /**
+     * @public
+     * <p>Allows grantee to read the object ACL.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>This functionality is not supported for directory buckets.</p>
+     *                </li>
+     *                <li>
+     *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    GrantReadACP?: string;
+    /**
+     * @public
+     * <p>Allows grantee to write the ACL for the applicable object.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>This functionality is not supported for directory buckets.</p>
+     *                </li>
+     *                <li>
+     *                   <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    GrantWriteACP?: string;
+    /**
+     * @public
+     * <p>Object key for which the PUT action was initiated.</p>
+     */
+    Key: string | undefined;
+    /**
+     * @public
+     * <p>A map of metadata to store with the object in S3.</p>
+     */
+    Metadata?: Record<string, string>;
+    /**
+     * @public
+     * <p>The server-side encryption algorithm that was used when you store this object in Amazon S3 (for example,
+     *             <code>AES256</code>, <code>aws:kms</code>, <code>aws:kms:dsse</code>).</p>
+     *          <p>
+     *             <b>General purpose buckets </b> - You have four mutually exclusive options to protect data using server-side encryption in
+     *                Amazon S3, depending on how you choose to manage the encryption keys. Specifically, the
+     *                encryption key options are Amazon S3 managed keys (SSE-S3), Amazon Web Services KMS keys (SSE-KMS or
+     *                DSSE-KMS), and customer-provided keys (SSE-C). Amazon S3 encrypts data with server-side
+     *                encryption by using Amazon S3 managed keys (SSE-S3) by default. You can optionally tell Amazon S3 to
+     *                encrypt data at rest by using server-side encryption with other key options. For more
+     *                information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html">Using Server-Side
+     *                   Encryption</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>Directory buckets </b> - For directory buckets, only the server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) value is supported.</p>
+     */
+    ServerSideEncryption?: ServerSideEncryption;
+    /**
+     * @public
+     * <p>By default, Amazon S3 uses the STANDARD Storage Class to store newly created objects. The
+     *          STANDARD storage class provides high durability and high availability. Depending on
+     *          performance needs, you can specify a different Storage Class. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html">Storage Classes</a> in the
+     *             <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <ul>
+     *                <li>
+     *                   <p>For directory buckets, only the S3 Express One Zone storage class is supported to store newly created objects.</p>
+     *                </li>
+     *                <li>
+     *                   <p>Amazon S3 on Outposts only uses
+     *                the OUTPOSTS Storage Class.</p>
+     *                </li>
+     *             </ul>
+     *          </note>
+     */
+    StorageClass?: StorageClass;
+    /**
+     * @public
+     * <p>If the bucket is configured as a website, redirects requests for this object to another
+     *          object in the same bucket or to an external URL. Amazon S3 stores the value of this header in
+     *          the object metadata. For information about object metadata, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingMetadata.html">Object Key and Metadata</a> in the <i>Amazon S3
+     *                User Guide</i>.</p>
+     *          <p>In the following example, the request header sets the redirect to an object
+     *          (anotherPage.html) in the same bucket:</p>
+     *          <p>
+     *             <code>x-amz-website-redirect-location: /anotherPage.html</code>
+     *          </p>
+     *          <p>In the following example, the request header sets the object redirect to another
+     *          website:</p>
+     *          <p>
+     *             <code>x-amz-website-redirect-location: http://www.example.com/</code>
+     *          </p>
+     *          <p>For more information about website hosting in Amazon S3, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html">Hosting Websites on Amazon S3</a> and
+     *             <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/how-to-page-redirect.html">How to
+     *                Configure Website Page Redirects</a> in the <i>Amazon S3
+     *                   User Guide</i>. </p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    WebsiteRedirectLocation?: string;
+    /**
+     * @public
+     * <p>Specifies the algorithm to use when encrypting the object (for example,
+     *          <code>AES256</code>).</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSECustomerAlgorithm?: string;
+    /**
+     * @public
+     * <p>Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data. This
+     *          value is used to store the object and then it is discarded; Amazon S3 does not store the
+     *          encryption key. The key must be appropriate for use with the algorithm specified in the
+     *             <code>x-amz-server-side-encryption-customer-algorithm</code> header.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSECustomerKey?: string;
+    /**
+     * @public
+     * <p>Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321. Amazon S3 uses
+     *          this header for a message integrity check to ensure that the encryption key was transmitted
+     *          without error.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSECustomerKeyMD5?: string;
+    /**
+     * @public
+     * <p>If <code>x-amz-server-side-encryption</code> has a valid value of <code>aws:kms</code>
+     *          or <code>aws:kms:dsse</code>, this header specifies the ID (Key ID, Key ARN, or Key Alias) of the Key Management Service (KMS)
+     *          symmetric encryption customer managed key that was used for the object. If you specify
+     *             <code>x-amz-server-side-encryption:aws:kms</code> or
+     *             <code>x-amz-server-side-encryption:aws:kms:dsse</code>, but do not provide<code>
+     *             x-amz-server-side-encryption-aws-kms-key-id</code>, Amazon S3 uses the Amazon Web Services managed key
+     *             (<code>aws/s3</code>) to protect the data. If the KMS key does not exist in the same
+     *          account that's issuing the command, you must use the full ARN and not just the ID. </p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSEKMSKeyId?: string;
+    /**
+     * @public
+     * <p>Specifies the Amazon Web Services KMS Encryption Context to use for object encryption. The value of
+     *          this header is a base64-encoded UTF-8 string holding JSON with the encryption context
+     *          key-value pairs. This value is stored as object metadata and automatically gets passed on
+     *          to Amazon Web Services KMS for future <code>GetObject</code> or <code>CopyObject</code> operations on
+     *          this object. This value must be explicitly added during <code>CopyObject</code> operations.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    SSEKMSEncryptionContext?: string;
+    /**
+     * @public
+     * <p>Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with
+     *          server-side encryption using Key Management Service (KMS) keys (SSE-KMS). Setting this header to
+     *             <code>true</code> causes Amazon S3 to use an S3 Bucket Key for object encryption with
+     *          SSE-KMS.</p>
+     *          <p>Specifying this header with a PUT action doesn’t affect bucket-level settings for S3
+     *          Bucket Key.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    BucketKeyEnabled?: boolean;
+    /**
+     * @public
+     * <p>Confirms that the requester knows that they will be charged for the request. Bucket
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestPayer?: RequestPayer;
+    /**
+     * @public
+     * <p>The tag-set for the object. The tag-set must be encoded as URL Query parameters. (For
+     *          example, "Key1=Value1")</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    Tagging?: string;
+    /**
+     * @public
+     * <p>The Object Lock mode that you want to apply to this object.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    ObjectLockMode?: ObjectLockMode;
+    /**
+     * @public
+     * <p>The date and time when you want this object's Object Lock to expire. Must be formatted
+     *          as a timestamp parameter.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    ObjectLockRetainUntilDate?: Date;
+    /**
+     * @public
+     * <p>Specifies whether a legal hold will be applied to this object. For more information
+     *          about S3 Object Lock, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html">Object Lock</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    ObjectLockLegalHoldStatus?: ObjectLockLegalHoldStatus;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ */
+export interface PutObjectAclOutput {
+    /**
+     * @public
+     * <p>If present, indicates that the requester was successfully charged for the
+     *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestCharged?: RequestCharged;
+}
+/**
+ * @public
+ */
+export interface PutObjectAclRequest {
+    /**
+     * @public
+     * <p>The canned ACL to apply to the object. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#CannedACL">Canned
+     *             ACL</a>.</p>
+     */
+    ACL?: ObjectCannedACL;
+    /**
+     * @public
+     * <p>Contains the elements that set the ACL permissions for an object per grantee.</p>
+     */
+    AccessControlPolicy?: AccessControlPolicy;
+    /**
+     * @public
+     * <p>The bucket name that contains the object to which you want to attach the ACL. </p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The base64-encoded 128-bit MD5 digest of the data. This header must be used as a message
+     *          integrity check to verify that the request body was not corrupted in transit. For more
+     *          information, go to <a href="http://www.ietf.org/rfc/rfc1864.txt">RFC
+     *          1864.></a>
+     *          </p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>Allows grantee the read, write, read ACP, and write ACP permissions on the
+     *          bucket.</p>
+     *          <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     */
+    GrantFullControl?: string;
+    /**
+     * @public
+     * <p>Allows grantee to list the objects in the bucket.</p>
+     *          <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     */
+    GrantRead?: string;
+    /**
+     * @public
+     * <p>Allows grantee to read the bucket ACL.</p>
+     *          <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     */
+    GrantReadACP?: string;
+    /**
+     * @public
+     * <p>Allows grantee to create new objects in the bucket.</p>
+     *          <p>For the bucket and object owners of existing objects, also allows deletions and
+     *          overwrites of those objects.</p>
+     */
+    GrantWrite?: string;
+    /**
+     * @public
+     * <p>Allows grantee to write the ACL for the applicable bucket.</p>
+     *          <p>This functionality is not supported for Amazon S3 on Outposts.</p>
+     */
+    GrantWriteACP?: string;
+    /**
+     * @public
+     * <p>Key for which the PUT action was initiated.</p>
+     */
+    Key: string | undefined;
+    /**
+     * @public
+     * <p>Confirms that the requester knows that they will be charged for the request. Bucket
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestPayer?: RequestPayer;
+    /**
+     * @public
+     * <p>Version ID used to reference a specific version of the object.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    VersionId?: string;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
+/**
+ * @public
+ */
+export interface PutObjectLegalHoldOutput {
+    /**
+     * @public
+     * <p>If present, indicates that the requester was successfully charged for the
+     *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestCharged?: RequestCharged;
+}
+/**
+ * @public
+ */
+export interface PutObjectLegalHoldRequest {
+    /**
+     * @public
+     * <p>The bucket name containing the object that you want to place a legal hold on. </p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
+     * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
+     */
+    Bucket: string | undefined;
+    /**
+     * @public
+     * <p>The key name for the object that you want to place a legal hold on.</p>
+     */
+    Key: string | undefined;
+    /**
+     * @public
+     * <p>Container element for the legal hold configuration you want to apply to the specified
+     *          object.</p>
+     */
+    LegalHold?: ObjectLockLegalHold;
+    /**
+     * @public
+     * <p>Confirms that the requester knows that they will be charged for the request. Bucket
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
+     */
+    RequestPayer?: RequestPayer;
+    /**
+     * @public
+     * <p>The version ID of the object that you want to place a legal hold on.</p>
+     */
+    VersionId?: string;
+    /**
+     * @public
+     * <p>The MD5 hash for the request body.</p>
+     *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
+     */
+    ContentMD5?: string;
+    /**
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
+     *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
+     *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
+     *     the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
+     *             <code>ChecksumAlgorithm</code> parameter.</p>
+     */
+    ChecksumAlgorithm?: ChecksumAlgorithm;
+    /**
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     */
+    ExpectedBucketOwner?: string;
+}
 /**
  * @public
  */
 export interface PutObjectLockConfigurationOutput {
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
 }
 /**
  * @public
  */
 export interface PutObjectLockConfigurationRequest {
     /**
+     * @public
      * <p>The bucket whose Object Lock configuration you want to create or replace.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>The Object Lock configuration that you want to apply to the specified bucket.</p>
      */
     ObjectLockConfiguration?: ObjectLockConfiguration;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
     /**
+     * @public
      * <p>A token to allow Object Lock to be enabled for an existing bucket.</p>
      */
     Token?: string;
     /**
+     * @public
      * <p>The MD5 hash for the request body.</p>
      *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
      */
     ContentMD5?: string;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
      *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
      *             <code>ChecksumAlgorithm</code> parameter.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -63,65 +1171,84 @@ export interface PutObjectLockConfigurationRequest {
  */
 export interface PutObjectRetentionOutput {
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
 }
 /**
  * @public
  */
 export interface PutObjectRetentionRequest {
     /**
+     * @public
      * <p>The bucket name that contains the object you want to apply this Object Retention
      *          configuration to. </p>
-     *          <p>When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>The key name for the object that you want to apply this Object Retention configuration
      *          to.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>The container element for the Object Retention configuration.</p>
      */
     Retention?: ObjectLockRetention;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
     /**
+     * @public
      * <p>The version ID for the object that you want to apply this Object Retention configuration
      *          to.</p>
      */
     VersionId?: string;
     /**
+     * @public
      * <p>Indicates whether this action should bypass Governance-mode restrictions.</p>
      */
     BypassGovernanceRetention?: boolean;
     /**
+     * @public
      * <p>The MD5 hash for the request body.</p>
      *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
      */
     ContentMD5?: string;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
      *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
      *             <code>ChecksumAlgorithm</code> parameter.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -130,6 +1257,7 @@ export interface PutObjectRetentionRequest {
  */
 export interface PutObjectTaggingOutput {
     /**
+     * @public
      * <p>The versionId of the object the tag-set was added to.</p>
      */
     VersionId?: string;
@@ -139,58 +1267,74 @@ export interface PutObjectTaggingOutput {
  */
 export interface PutObjectTaggingRequest {
     /**
+     * @public
      * <p>The bucket name containing the object. </p>
-     *          <p>When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
-     *          <p>When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
      *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>Name of the object key.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>The versionId of the object that the tag-set will be added to.</p>
      */
     VersionId?: string;
     /**
+     * @public
      * <p>The MD5 hash for the request body.</p>
      *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
      */
     ContentMD5?: string;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
      *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
      *             <code>ChecksumAlgorithm</code> parameter.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
+     * @public
      * <p>Container for the <code>TagSet</code> and <code>Tag</code> elements</p>
      */
     Tagging: Tagging | undefined;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
 }
 /**
  * @public
  */
 export interface PutPublicAccessBlockRequest {
     /**
+     * @public
      * <p>The name of the Amazon S3 bucket whose <code>PublicAccessBlock</code> configuration you want
      *          to set.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
@@ -198,28 +1342,32 @@ export interface PutPublicAccessBlockRequest {
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>The MD5 hash of the <code>PutPublicAccessBlock</code> request body. </p>
      *          <p>For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.</p>
      */
     ContentMD5?: string;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
      *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
      *             <code>ChecksumAlgorithm</code> parameter.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
+     * @public
      * <p>The <code>PublicAccessBlock</code> configuration that you want to apply to this Amazon S3
      *          bucket. You can enable the configuration options in any combination. For more information
      *          about when Amazon S3 considers a bucket or object public, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status">The Meaning of "Public"</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     PublicAccessBlockConfiguration: PublicAccessBlockConfiguration | undefined;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -240,11 +1388,16 @@ export declare class ObjectAlreadyInActiveTierError extends __BaseException {
  */
 export interface RestoreObjectOutput {
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
     /**
+     * @public
      * <p>Indicates the path in the provided S3 output location where Select results will be
      *          restored to.</p>
      */
@@ -269,9 +1422,10 @@ export type Tier = (typeof Tier)[keyof typeof Tier];
  */
 export interface GlacierJobParameters {
     /**
+     * @public
      * <p>Retrieval tier at which the restore will be processed.</p>
      */
-    Tier: Tier | string | undefined;
+    Tier: Tier | undefined;
 }
 /**
  * @public
@@ -279,11 +1433,13 @@ export interface GlacierJobParameters {
  */
 export interface Encryption {
     /**
+     * @public
      * <p>The server-side encryption algorithm used when storing job results in Amazon S3 (for example,
      *          AES256, <code>aws:kms</code>).</p>
      */
-    EncryptionType: ServerSideEncryption | string | undefined;
+    EncryptionType: ServerSideEncryption | undefined;
     /**
+     * @public
      * <p>If the encryption type is <code>aws:kms</code>, this optional value specifies the ID of
      *          the symmetric encryption customer managed key to use for encryption of job results. Amazon S3 only
      *          supports symmetric encryption KMS keys. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html">Asymmetric keys in KMS</a> in the <i>Amazon Web Services Key Management Service
@@ -291,6 +1447,7 @@ export interface Encryption {
      */
     KMSKeyId?: string;
     /**
+     * @public
      * <p>If the encryption type is <code>aws:kms</code>, this optional value can be used to
      *          specify the encryption context for the restore results.</p>
      */
@@ -302,10 +1459,12 @@ export interface Encryption {
  */
 export interface MetadataEntry {
     /**
+     * @public
      * <p>Name of the object.</p>
      */
     Name?: string;
     /**
+     * @public
      * <p>Value of the object.</p>
      */
     Value?: string;
@@ -316,37 +1475,45 @@ export interface MetadataEntry {
  */
 export interface S3Location {
     /**
+     * @public
      * <p>The name of the bucket where the restore results will be placed.</p>
      */
     BucketName: string | undefined;
     /**
+     * @public
      * <p>The prefix that is prepended to the restore results for this request.</p>
      */
     Prefix: string | undefined;
     /**
+     * @public
      * <p>Contains the type of server-side encryption used.</p>
      */
     Encryption?: Encryption;
     /**
+     * @public
      * <p>The canned ACL to apply to the restore results.</p>
      */
-    CannedACL?: ObjectCannedACL | string;
+    CannedACL?: ObjectCannedACL;
     /**
+     * @public
      * <p>A list of grants that control access to the staged results.</p>
      */
     AccessControlList?: Grant[];
     /**
+     * @public
      * <p>The tag-set that is applied to the restore results.</p>
      */
     Tagging?: Tagging;
     /**
+     * @public
      * <p>A list of metadata to store with the restore results in S3.</p>
      */
     UserMetadata?: MetadataEntry[];
     /**
+     * @public
      * <p>The class of storage used to store the restore results.</p>
      */
-    StorageClass?: StorageClass | string;
+    StorageClass?: StorageClass;
 }
 /**
  * @public
@@ -354,6 +1521,7 @@ export interface S3Location {
  */
 export interface OutputLocation {
     /**
+     * @public
      * <p>Describes an S3 location that will receive the results of the restore request.</p>
      */
     S3?: S3Location;
@@ -402,6 +1570,7 @@ export type FileHeaderInfo = (typeof FileHeaderInfo)[keyof typeof FileHeaderInfo
  */
 export interface CSVInput {
     /**
+     * @public
      * <p>Describes the first line of input. Valid values are:</p>
      *          <ul>
      *             <li>
@@ -421,8 +1590,9 @@ export interface CSVInput {
      *             </li>
      *          </ul>
      */
-    FileHeaderInfo?: FileHeaderInfo | string;
+    FileHeaderInfo?: FileHeaderInfo;
     /**
+     * @public
      * <p>A single character used to indicate that a row should be ignored when the character is
      *          present at the start of that row. You can specify any character to indicate a comment line.
      *          The default character is <code>#</code>.</p>
@@ -431,22 +1601,26 @@ export interface CSVInput {
      */
     Comments?: string;
     /**
+     * @public
      * <p>A single character used for escaping the quotation mark character inside an already
      *          escaped value. For example, the value <code>""" a , b """</code> is parsed as <code>" a , b
      *             "</code>.</p>
      */
     QuoteEscapeCharacter?: string;
     /**
+     * @public
      * <p>A single character used to separate individual records in the input. Instead of the
      *          default value, you can specify an arbitrary delimiter.</p>
      */
     RecordDelimiter?: string;
     /**
+     * @public
      * <p>A single character used to separate individual fields in a record. You can specify an
      *          arbitrary delimiter.</p>
      */
     FieldDelimiter?: string;
     /**
+     * @public
      * <p>A single character used for escaping when the field delimiter is part of the value. For
      *          example, if the value is <code>a, b</code>, Amazon S3 wraps this field value in quotation marks,
      *          as follows: <code>" a , b "</code>.</p>
@@ -458,6 +1632,7 @@ export interface CSVInput {
      */
     QuoteCharacter?: string;
     /**
+     * @public
      * <p>Specifies that CSV field values may contain quoted record delimiters and such records
      *          should be allowed. Default value is FALSE. Setting this value to TRUE may lower
      *          performance.</p>
@@ -482,9 +1657,10 @@ export type JSONType = (typeof JSONType)[keyof typeof JSONType];
  */
 export interface JSONInput {
     /**
+     * @public
      * <p>The type of JSON. Valid values: Document, Lines.</p>
      */
-    Type?: JSONType | string;
+    Type?: JSONType;
 }
 /**
  * @public
@@ -498,19 +1674,23 @@ export interface ParquetInput {
  */
 export interface InputSerialization {
     /**
+     * @public
      * <p>Describes the serialization of a CSV-encoded object.</p>
      */
     CSV?: CSVInput;
     /**
+     * @public
      * <p>Specifies object's compression format. Valid values: NONE, GZIP, BZIP2. Default Value:
      *          NONE.</p>
      */
-    CompressionType?: CompressionType | string;
+    CompressionType?: CompressionType;
     /**
+     * @public
      * <p>Specifies JSON as object's input serialization format.</p>
      */
     JSON?: JSONInput;
     /**
+     * @public
      * <p>Specifies Parquet as object's input serialization format.</p>
      */
     Parquet?: ParquetInput;
@@ -534,6 +1714,7 @@ export type QuoteFields = (typeof QuoteFields)[keyof typeof QuoteFields];
  */
 export interface CSVOutput {
     /**
+     * @public
      * <p>Indicates whether to use quotation marks around output fields. </p>
      *          <ul>
      *             <li>
@@ -546,23 +1727,27 @@ export interface CSVOutput {
      *             </li>
      *          </ul>
      */
-    QuoteFields?: QuoteFields | string;
+    QuoteFields?: QuoteFields;
     /**
+     * @public
      * <p>The single character used for escaping the quote character inside an already escaped
      *          value.</p>
      */
     QuoteEscapeCharacter?: string;
     /**
+     * @public
      * <p>A single character used to separate individual records in the output. Instead of the
      *          default value, you can specify an arbitrary delimiter.</p>
      */
     RecordDelimiter?: string;
     /**
+     * @public
      * <p>The value used to separate individual fields in a record. You can specify an arbitrary
      *          delimiter.</p>
      */
     FieldDelimiter?: string;
     /**
+     * @public
      * <p>A single character used for escaping when the field delimiter is part of the value. For
      *          example, if the value is <code>a, b</code>, Amazon S3 wraps this field value in quotation marks,
      *          as follows: <code>" a , b "</code>.</p>
@@ -575,6 +1760,7 @@ export interface CSVOutput {
  */
 export interface JSONOutput {
     /**
+     * @public
      * <p>The value used to separate individual records in the output. If no value is specified,
      *          Amazon S3 uses a newline character ('\n').</p>
      */
@@ -586,10 +1772,12 @@ export interface JSONOutput {
  */
 export interface OutputSerialization {
     /**
+     * @public
      * <p>Describes the serialization of CSV-encoded Select results.</p>
      */
     CSV?: CSVOutput;
     /**
+     * @public
      * <p>Specifies JSON as request's output serialization format.</p>
      */
     JSON?: JSONOutput;
@@ -600,18 +1788,22 @@ export interface OutputSerialization {
  */
 export interface SelectParameters {
     /**
+     * @public
      * <p>Describes the serialization format of the object.</p>
      */
     InputSerialization: InputSerialization | undefined;
     /**
+     * @public
      * <p>The type of the provided expression (for example, SQL).</p>
      */
-    ExpressionType: ExpressionType | string | undefined;
+    ExpressionType: ExpressionType | undefined;
     /**
+     * @public
      * <p>The expression that is used to query the object.</p>
      */
     Expression: string | undefined;
     /**
+     * @public
      * <p>Describes how the results of the Select job are serialized.</p>
      */
     OutputSerialization: OutputSerialization | undefined;
@@ -633,6 +1825,7 @@ export type RestoreRequestType = (typeof RestoreRequestType)[keyof typeof Restor
  */
 export interface RestoreRequest {
     /**
+     * @public
      * <p>Lifetime of the active copy in days. Do not use with restores that specify
      *             <code>OutputLocation</code>.</p>
      *          <p>The Days element is required for regular restores, and must not be provided for select
@@ -640,27 +1833,33 @@ export interface RestoreRequest {
      */
     Days?: number;
     /**
+     * @public
      * <p>S3 Glacier related parameters pertaining to this job. Do not use with restores that
      *          specify <code>OutputLocation</code>.</p>
      */
     GlacierJobParameters?: GlacierJobParameters;
     /**
+     * @public
      * <p>Type of restore request.</p>
      */
-    Type?: RestoreRequestType | string;
+    Type?: RestoreRequestType;
     /**
+     * @public
      * <p>Retrieval tier at which the restore will be processed.</p>
      */
-    Tier?: Tier | string;
+    Tier?: Tier;
     /**
+     * @public
      * <p>The optional description for the job.</p>
      */
     Description?: string;
     /**
+     * @public
      * <p>Describes the parameters for Select job types.</p>
      */
     SelectParameters?: SelectParameters;
     /**
+     * @public
      * <p>Describes the location where the restore job's output is stored.</p>
      */
     OutputLocation?: OutputLocation;
@@ -670,45 +1869,59 @@ export interface RestoreRequest {
  */
 export interface RestoreObjectRequest {
     /**
+     * @public
      * <p>The bucket name containing the object to restore. </p>
-     *          <p>When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
-     *          <p>When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
      *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>Object key for which the action was initiated.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>VersionId used to reference a specific version of the object.</p>
      */
     VersionId?: string;
     /**
+     * @public
      * <p>Container for restore job parameters.</p>
      */
     RestoreRequest?: RestoreRequest;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
      *          <p>If you provide an individual checksum, Amazon S3 ignores any provided
      *             <code>ChecksumAlgorithm</code> parameter.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -732,14 +1945,17 @@ export interface EndEvent {
  */
 export interface Progress {
     /**
+     * @public
      * <p>The current number of object bytes scanned.</p>
      */
     BytesScanned?: number;
     /**
+     * @public
      * <p>The current number of uncompressed object bytes processed.</p>
      */
     BytesProcessed?: number;
     /**
+     * @public
      * <p>The current number of bytes of records payload data returned.</p>
      */
     BytesReturned?: number;
@@ -750,6 +1966,7 @@ export interface Progress {
  */
 export interface ProgressEvent {
     /**
+     * @public
      * <p>The Progress event details.</p>
      */
     Details?: Progress;
@@ -760,6 +1977,7 @@ export interface ProgressEvent {
  */
 export interface RecordsEvent {
     /**
+     * @public
      * <p>The byte array of partial, one or more result records.</p>
      */
     Payload?: Uint8Array;
@@ -770,14 +1988,17 @@ export interface RecordsEvent {
  */
 export interface Stats {
     /**
+     * @public
      * <p>The total number of object bytes scanned.</p>
      */
     BytesScanned?: number;
     /**
+     * @public
      * <p>The total number of uncompressed object bytes processed.</p>
      */
     BytesProcessed?: number;
     /**
+     * @public
      * <p>The total number of bytes of records payload data returned.</p>
      */
     BytesReturned?: number;
@@ -788,6 +2009,7 @@ export interface Stats {
  */
 export interface StatsEvent {
     /**
+     * @public
      * <p>The Stats event details.</p>
      */
     Details?: Stats;
@@ -802,6 +2024,7 @@ export type SelectObjectContentEventStream = SelectObjectContentEventStream.Cont
  */
 export declare namespace SelectObjectContentEventStream {
     /**
+     * @public
      * <p>The Records Event.</p>
      */
     interface RecordsMember {
@@ -813,6 +2036,7 @@ export declare namespace SelectObjectContentEventStream {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>The Stats Event.</p>
      */
     interface StatsMember {
@@ -824,6 +2048,7 @@ export declare namespace SelectObjectContentEventStream {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>The Progress Event.</p>
      */
     interface ProgressMember {
@@ -835,6 +2060,7 @@ export declare namespace SelectObjectContentEventStream {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>The Continuation Event.</p>
      */
     interface ContMember {
@@ -846,6 +2072,7 @@ export declare namespace SelectObjectContentEventStream {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>The End Event.</p>
      */
     interface EndMember {
@@ -856,6 +2083,9 @@ export declare namespace SelectObjectContentEventStream {
         End: EndEvent;
         $unknown?: never;
     }
+    /**
+     * @public
+     */
     interface $UnknownMember {
         Records?: never;
         Stats?: never;
@@ -879,6 +2109,7 @@ export declare namespace SelectObjectContentEventStream {
  */
 export interface SelectObjectContentOutput {
     /**
+     * @public
      * <p>The array of results.</p>
      */
     Payload?: AsyncIterable<SelectObjectContentEventStream>;
@@ -890,6 +2121,7 @@ export interface SelectObjectContentOutput {
  */
 export interface RequestProgress {
     /**
+     * @public
      * <p>Specifies whether periodic QueryProgress frames should be sent. Valid values: TRUE,
      *          FALSE. Default value: FALSE.</p>
      */
@@ -904,6 +2136,7 @@ export interface RequestProgress {
  */
 export interface ScanRange {
     /**
+     * @public
      * <p>Specifies the start of the byte range. This parameter is optional. Valid values:
      *          non-negative integers. The default value is 0. If only <code>start</code> is supplied, it
      *          means scan from that point to the end of the file. For example,
@@ -912,6 +2145,7 @@ export interface ScanRange {
      */
     Start?: number;
     /**
+     * @public
      * <p>Specifies the end of the byte range. This parameter is optional. Valid values:
      *          non-negative integers. The default value is one less than the size of the object being
      *          queried. If only the End parameter is supplied, it is interpreted to mean scan the last N
@@ -932,16 +2166,19 @@ export interface ScanRange {
  */
 export interface SelectObjectContentRequest {
     /**
+     * @public
      * <p>The S3 bucket.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>The object key.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>The server-side encryption (SSE) algorithm used to encrypt the object. This parameter is needed only when the object was created
      *     using a checksum algorithm. For more information,
      *     see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html">Protecting data using SSE-C keys</a> in the
@@ -949,6 +2186,7 @@ export interface SelectObjectContentRequest {
      */
     SSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>The server-side encryption (SSE) customer managed key. This parameter is needed only when the object was created using a checksum algorithm.
      *     For more information, see
      *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html">Protecting data using SSE-C keys</a> in the
@@ -956,6 +2194,7 @@ export interface SelectObjectContentRequest {
      */
     SSECustomerKey?: string;
     /**
+     * @public
      * <p>The MD5 server-side encryption (SSE) customer managed key. This parameter is needed only when the object was created using a checksum
      *     algorithm. For more information,
      *     see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html">Protecting data using SSE-C keys</a> in the
@@ -963,26 +2202,32 @@ export interface SelectObjectContentRequest {
      */
     SSECustomerKeyMD5?: string;
     /**
+     * @public
      * <p>The expression that is used to query the object.</p>
      */
     Expression: string | undefined;
     /**
+     * @public
      * <p>The type of the provided expression (for example, SQL).</p>
      */
-    ExpressionType: ExpressionType | string | undefined;
+    ExpressionType: ExpressionType | undefined;
     /**
+     * @public
      * <p>Specifies if periodic request progress information should be enabled.</p>
      */
     RequestProgress?: RequestProgress;
     /**
+     * @public
      * <p>Describes the format of the data in the object that is being queried.</p>
      */
     InputSerialization: InputSerialization | undefined;
     /**
+     * @public
      * <p>Describes the format of the data that you want Amazon S3 to return in response.</p>
      */
     OutputSerialization: OutputSerialization | undefined;
     /**
+     * @public
      * <p>Specifies the byte range of the object to get the records from. A record is processed
      *          when its first byte is contained by the range. This parameter is optional, but when
      *          specified, it must not be empty. See RFC 2616, Section 14.35.1 about how to specify the
@@ -1010,7 +2255,8 @@ export interface SelectObjectContentRequest {
      */
     ScanRange?: ScanRange;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -1019,100 +2265,149 @@ export interface SelectObjectContentRequest {
  */
 export interface UploadPartOutput {
     /**
-     * <p>The server-side encryption algorithm used when storing this object in Amazon S3 (for example,
+     * @public
+     * <p>The server-side encryption algorithm used when you store this object in Amazon S3 (for example,
      *             <code>AES256</code>, <code>aws:kms</code>).</p>
+     *          <note>
+     *             <p>For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>
+     *          </note>
      */
-    ServerSideEncryption?: ServerSideEncryption | string;
+    ServerSideEncryption?: ServerSideEncryption;
     /**
+     * @public
      * <p>Entity tag for the uploaded object.</p>
      */
     ETag?: string;
     /**
+     * @public
      * <p>The base64-encoded, 32-bit CRC32 checksum of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumCRC32?: string;
     /**
+     * @public
      * <p>The base64-encoded, 32-bit CRC32C checksum of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumCRC32C?: string;
     /**
+     * @public
      * <p>The base64-encoded, 160-bit SHA-1 digest of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use the API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumSHA1?: string;
     /**
+     * @public
      * <p>The base64-encoded, 256-bit SHA-256 digest of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumSHA256?: string;
     /**
+     * @public
      * <p>If server-side encryption with a customer-provided encryption key was requested, the
-     *          response will include this header confirming the encryption algorithm used.</p>
+     *          response will include this header to confirm the encryption algorithm that's used.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>If server-side encryption with a customer-provided encryption key was requested, the
-     *          response will include this header to provide round-trip message integrity verification of
+     *          response will include this header to provide the round-trip message integrity verification of
      *          the customer-provided encryption key.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerKeyMD5?: string;
     /**
-     * <p>If present, specifies the ID of the Key Management Service (KMS) symmetric encryption customer managed key
-     *          was used for the object.</p>
+     * @public
+     * <p>If present, indicates the ID of the Key Management Service (KMS) symmetric encryption customer managed key
+     *          that was used for the object.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSEKMSKeyId?: string;
     /**
+     * @public
      * <p>Indicates whether the multipart upload uses an S3 Bucket Key for server-side encryption
      *          with Key Management Service (KMS) keys (SSE-KMS).</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     BucketKeyEnabled?: boolean;
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
 }
 /**
  * @public
  */
 export interface UploadPartRequest {
     /**
+     * @public
      * <p>Object data.</p>
      */
-    Body?: Readable | ReadableStream | Blob;
+    Body?: StreamingBlobTypes;
     /**
+     * @public
      * <p>The name of the bucket to which the multipart upload was initiated.</p>
-     *          <p>When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
-     *          <p>When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *          <p>
+     *             <b>Directory buckets</b> - When you use this operation with a directory bucket, you must use virtual-hosted-style requests in the format <code>
+     *                <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>. Path-style requests are not supported.  Directory bucket names must be unique in the chosen Availability Zone. Bucket names must follow the format <code>
+     *                <i>bucket_base_name</i>--<i>az-id</i>--x-s3</code> (for example, <code>
+     *                <i>DOC-EXAMPLE-BUCKET</i>--<i>usw2-az2</i>--x-s3</code>). For information about bucket naming
+     *          restrictions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-naming-rules.html">Directory bucket naming
+     *             rules</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>Access points and Object Lambda access points are not supported by directory buckets.</p>
+     *          </note>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
      *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>Size of the body in bytes. This parameter is useful when the size of the body cannot be
      *          determined automatically.</p>
      */
     ContentLength?: number;
     /**
+     * @public
      * <p>The base64-encoded 128-bit MD5 digest of the part data. This parameter is auto-populated
      *          when using the command from the CLI. This parameter is required if object lock parameters
      *          are specified.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     ContentMD5?: string;
     /**
-     * <p>Indicates the algorithm used to create the checksum for the object when using the SDK. This header will not provide any
-     *     additional functionality if not using the SDK. When sending this header, there must be a corresponding <code>x-amz-checksum</code> or
+     * @public
+     * <p>Indicates the algorithm used to create the checksum for the object when you use the SDK. This header will not provide any
+     *     additional functionality if you don't use the SDK. When you send this header, there must be a corresponding <code>x-amz-checksum</code> or
      *     <code>x-amz-trailer</code> header sent. Otherwise, Amazon S3 fails the request with the HTTP status code <code>400 Bad Request</code>. For more
      *     information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in
      *     the <i>Amazon S3 User Guide</i>.</p>
@@ -1121,8 +2416,9 @@ export interface UploadPartRequest {
      *          <p>This checksum algorithm must be the same for all parts and it match the checksum value
      *          supplied in the <code>CreateMultipartUpload</code> request.</p>
      */
-    ChecksumAlgorithm?: ChecksumAlgorithm | string;
+    ChecksumAlgorithm?: ChecksumAlgorithm;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
      *     This header specifies the base64-encoded, 32-bit CRC32 checksum of the object. For more information, see
      *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
@@ -1130,6 +2426,7 @@ export interface UploadPartRequest {
      */
     ChecksumCRC32?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
      *     This header specifies the base64-encoded, 32-bit CRC32C checksum of the object. For more information, see
      *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
@@ -1137,6 +2434,7 @@ export interface UploadPartRequest {
      */
     ChecksumCRC32C?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
      *     This header specifies the base64-encoded, 160-bit SHA-1 digest of the object. For more information, see
      *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
@@ -1144,6 +2442,7 @@ export interface UploadPartRequest {
      */
     ChecksumSHA1?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is the same data that was originally sent.
      *     This header specifies the base64-encoded, 256-bit SHA-256 digest of the object. For more information, see
      *     <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html">Checking object integrity</a> in the
@@ -1151,46 +2450,68 @@ export interface UploadPartRequest {
      */
     ChecksumSHA256?: string;
     /**
+     * @public
      * <p>Object key for which the multipart upload was initiated.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>Part number of part being uploaded. This is a positive integer between 1 and
      *          10,000.</p>
      */
     PartNumber: number | undefined;
     /**
+     * @public
      * <p>Upload ID identifying the multipart upload whose part is being uploaded.</p>
      */
     UploadId: string | undefined;
     /**
-     * <p>Specifies the algorithm to use to when encrypting the object (for example,
+     * @public
+     * <p>Specifies the algorithm to use when encrypting the object (for example,
      *          AES256).</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data. This
      *          value is used to store the object and then it is discarded; Amazon S3 does not store the
      *          encryption key. The key must be appropriate for use with the algorithm specified in the
      *             <code>x-amz-server-side-encryption-customer-algorithm header</code>. This must be the
      *          same encryption key specified in the initiate multipart upload request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerKey?: string;
     /**
+     * @public
      * <p>Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321. Amazon S3 uses
      *          this header for a message integrity check to ensure that the encryption key was transmitted
      *          without error.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerKeyMD5?: string;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
     /**
-     * <p>The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected bucket owner. If the account ID that you provide does not match the actual owner of the bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
 }
@@ -1200,37 +2521,43 @@ export interface UploadPartRequest {
  */
 export interface CopyPartResult {
     /**
+     * @public
      * <p>Entity tag of the object.</p>
      */
     ETag?: string;
     /**
+     * @public
      * <p>Date and time at which the object was uploaded.</p>
      */
     LastModified?: Date;
     /**
+     * @public
      * <p>The base64-encoded, 32-bit CRC32 checksum of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumCRC32?: string;
     /**
+     * @public
      * <p>The base64-encoded, 32-bit CRC32C checksum of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumCRC32C?: string;
     /**
+     * @public
      * <p>The base64-encoded, 160-bit SHA-1 digest of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use the API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
     ChecksumSHA1?: string;
     /**
+     * @public
      * <p>The base64-encoded, 256-bit SHA-256 digest of the object. This will only be present if it was uploaded
-     *     with the object. With multipart uploads, this may not be a checksum value of the object. For more information about how checksums are calculated
+     *     with the object. When you use an API operation on an object that was uploaded using multipart uploads, this value may not be a direct checksum value of the full object. Instead, it's a calculation based on the checksum values of each individual part. For more information about how checksums are calculated
      *     with multipart uploads, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html#large-object-checksums">
      *     Checking object integrity</a> in the <i>Amazon S3 User Guide</i>.</p>
      */
@@ -1241,60 +2568,103 @@ export interface CopyPartResult {
  */
 export interface UploadPartCopyOutput {
     /**
+     * @public
      * <p>The version of the source object that was copied, if you have enabled versioning on the
      *          source bucket.</p>
+     *          <note>
+     *             <p>This functionality is not supported when the source object is in a directory bucket.</p>
+     *          </note>
      */
     CopySourceVersionId?: string;
     /**
+     * @public
      * <p>Container for all response elements.</p>
      */
     CopyPartResult?: CopyPartResult;
     /**
-     * <p>The server-side encryption algorithm used when storing this object in Amazon S3 (for example,
+     * @public
+     * <p>The server-side encryption algorithm used when you store this object in Amazon S3 (for example,
      *             <code>AES256</code>, <code>aws:kms</code>).</p>
+     *          <note>
+     *             <p>For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>
+     *          </note>
      */
-    ServerSideEncryption?: ServerSideEncryption | string;
+    ServerSideEncryption?: ServerSideEncryption;
     /**
+     * @public
      * <p>If server-side encryption with a customer-provided encryption key was requested, the
-     *          response will include this header confirming the encryption algorithm used.</p>
+     *          response will include this header to confirm the encryption algorithm that's used.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>If server-side encryption with a customer-provided encryption key was requested, the
-     *          response will include this header to provide round-trip message integrity verification of
+     *          response will include this header to provide the round-trip message integrity verification of
      *          the customer-provided encryption key.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSECustomerKeyMD5?: string;
     /**
-     * <p>If present, specifies the ID of the Key Management Service (KMS) symmetric encryption customer managed key
+     * @public
+     * <p>If present, indicates the ID of the Key Management Service (KMS) symmetric encryption customer managed key
      *          that was used for the object.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     SSEKMSKeyId?: string;
     /**
+     * @public
      * <p>Indicates whether the multipart upload uses an S3 Bucket Key for server-side encryption
      *          with Key Management Service (KMS) keys (SSE-KMS).</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
     BucketKeyEnabled?: boolean;
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
 }
 /**
  * @public
  */
 export interface UploadPartCopyRequest {
     /**
+     * @public
      * <p>The bucket name.</p>
-     *          <p>When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
-     *          <p>When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
+     *          <p>
+     *             <b>Directory buckets</b> - When you use this operation with a directory bucket, you must use virtual-hosted-style requests in the format <code>
+     *                <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>. Path-style requests are not supported.  Directory bucket names must be unique in the chosen Availability Zone. Bucket names must follow the format <code>
+     *                <i>bucket_base_name</i>--<i>az-id</i>--x-s3</code> (for example, <code>
+     *                <i>DOC-EXAMPLE-BUCKET</i>--<i>usw2-az2</i>--x-s3</code>). For information about bucket naming
+     *          restrictions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-bucket-naming-rules.html">Directory bucket naming
+     *             rules</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <p>
+     *             <b>Access points</b> - When you use this action with an access point, you must provide the alias of the access point in place of the bucket name or specify the access point ARN. When using the access point ARN, you must direct requests to the access point hostname. The access point hostname takes the form <i>AccessPointName</i>-<i>AccountId</i>.s3-accesspoint.<i>Region</i>.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html">Using access points</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>Access points and Object Lambda access points are not supported by directory buckets.</p>
+     *          </note>
+     *          <p>
+     *             <b>S3 on Outposts</b> - When you use this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form <code>
      *                <i>AccessPointName</i>-<i>AccountId</i>.<i>outpostID</i>.s3-outposts.<i>Region</i>.amazonaws.com</code>. When you use this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts access point ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html">What is S3 on Outposts?</a> in the <i>Amazon S3 User Guide</i>.</p>
      * <p>Note: To supply the Multi-region Access Point (MRAP) to Bucket, you need to install the "@aws-sdk/signature-v4-crt" package to your project dependencies.
      * For more information, please go to https://github.com/aws/aws-sdk-js-v3#known-issues</p>
      */
     Bucket: string | undefined;
     /**
+     * @public
      * <p>Specifies the source object for the copy operation. You specify the value in one of two
      *          formats, depending on whether you want to access the source object through an <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html">access point</a>:</p>
      *          <ul>
@@ -1308,35 +2678,107 @@ export interface UploadPartCopyRequest {
      *             <li>
      *                <p>For objects accessed through access points, specify the Amazon Resource Name (ARN) of the object as accessed through the access point, in the format <code>arn:aws:s3:<Region>:<account-id>:accesspoint/<access-point-name>/object/<key></code>. For example, to copy the object <code>reports/january.pdf</code> through access point <code>my-access-point</code> owned by account <code>123456789012</code> in Region <code>us-west-2</code>, use the URL encoding of <code>arn:aws:s3:us-west-2:123456789012:accesspoint/my-access-point/object/reports/january.pdf</code>. The value must be URL encoded.</p>
      *                <note>
-     *                   <p>Amazon S3 supports copy operations using access points only when the source and destination buckets are in the same Amazon Web Services Region.</p>
+     *                   <ul>
+     *                      <li>
+     *                         <p>Amazon S3 supports copy operations using Access points only when the source and destination buckets are in the same Amazon Web Services Region.</p>
+     *                      </li>
+     *                      <li>
+     *                         <p>Access points are not supported by directory buckets.</p>
+     *                      </li>
+     *                   </ul>
      *                </note>
      *                <p>Alternatively, for objects accessed through Amazon S3 on Outposts, specify the ARN of the object as accessed in the format <code>arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/object/<key></code>. For example, to copy the object <code>reports/january.pdf</code> through outpost <code>my-outpost</code> owned by account <code>123456789012</code> in Region <code>us-west-2</code>, use the URL encoding of <code>arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/object/reports/january.pdf</code>. The value must be URL-encoded.  </p>
      *             </li>
      *          </ul>
-     *          <p>To copy a specific version of an object, append <code>?versionId=<version-id></code>
-     *          to the value (for example,
-     *             <code>awsexamplebucket/reports/january.pdf?versionId=QUpfdndhfd8438MNFDN93jdnJFkdmqnh893</code>).
-     *          If you don't specify a version ID, Amazon S3 copies the latest version of the source
-     *          object.</p>
+     *          <p>If your bucket has versioning enabled, you could have multiple versions of the
+     *          same object. By default, <code>x-amz-copy-source</code> identifies the current
+     *          version of the source object to copy.
+     *          To copy a specific version of the source object to copy, append <code>?versionId=<version-id></code>
+     *          to the <code>x-amz-copy-source</code> request header (for example,
+     *          <code>x-amz-copy-source: /awsexamplebucket/reports/january.pdf?versionId=QUpfdndhfd8438MNFDN93jdnJFkdmqnh893</code>).
+     *          </p>
+     *          <p>If the current version is a delete marker and you
+     *          don't specify a versionId in the <code>x-amz-copy-source</code> request header, Amazon S3 returns a
+     *          <code>404 Not Found</code> error, because the object does not exist. If you specify versionId in the
+     *          <code>x-amz-copy-source</code> and the versionId is a delete marker, Amazon S3
+     *          returns an HTTP <code>400 Bad Request</code> error, because you are not allowed to specify a delete marker
+     *          as a version for the <code>x-amz-copy-source</code>. </p>
+     *          <note>
+     *             <p>
+     *                <b>Directory buckets</b> - S3 Versioning isn't enabled and supported for directory buckets.</p>
+     *          </note>
      */
     CopySource: string | undefined;
     /**
+     * @public
      * <p>Copies the object if its entity tag (ETag) matches the specified tag.</p>
+     *          <p>If both of the
+     *       <code>x-amz-copy-source-if-match</code> and
+     *       <code>x-amz-copy-source-if-unmodified-since</code> headers are present in the
+     *       request as follows:</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-match</code> condition evaluates to <code>true</code>,
+     *          and;</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-unmodified-since</code> condition evaluates to
+     *          <code>false</code>;</p>
+     *          <p>Amazon S3 returns <code>200 OK</code> and copies the data.
+     *          </p>
      */
     CopySourceIfMatch?: string;
     /**
+     * @public
      * <p>Copies the object if it has been modified since the specified time.</p>
+     *          <p>If both of the
+     *       <code>x-amz-copy-source-if-none-match</code> and
+     *       <code>x-amz-copy-source-if-modified-since</code> headers are present in the
+     *       request as follows:</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-none-match</code> condition evaluates to
+     *          <code>false</code>, and;</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-modified-since</code> condition evaluates to
+     *          <code>true</code>;</p>
+     *          <p>Amazon S3 returns <code>412 Precondition Failed</code> response code.
+     *          </p>
      */
     CopySourceIfModifiedSince?: Date;
     /**
+     * @public
      * <p>Copies the object if its entity tag (ETag) is different than the specified ETag.</p>
+     *          <p>If both of the
+     *       <code>x-amz-copy-source-if-none-match</code> and
+     *       <code>x-amz-copy-source-if-modified-since</code> headers are present in the
+     *       request as follows:</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-none-match</code> condition evaluates to
+     *          <code>false</code>, and;</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-modified-since</code> condition evaluates to
+     *          <code>true</code>;</p>
+     *          <p>Amazon S3 returns <code>412 Precondition Failed</code> response code.
+     *          </p>
      */
     CopySourceIfNoneMatch?: string;
     /**
+     * @public
      * <p>Copies the object if it hasn't been modified since the specified time.</p>
+     *          <p>If both of the
+     *          <code>x-amz-copy-source-if-match</code> and
+     *          <code>x-amz-copy-source-if-unmodified-since</code> headers are present in the
+     *          request as follows:</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-match</code> condition evaluates to <code>true</code>,
+     *          and;</p>
+     *          <p>
+     *             <code>x-amz-copy-source-if-unmodified-since</code> condition evaluates to
+     *          <code>false</code>;</p>
+     *          <p>Amazon S3 returns <code>200 OK</code> and copies the data.
+     *          </p>
      */
     CopySourceIfUnmodifiedSince?: Date;
     /**
+     * @public
      * <p>The range of bytes to copy from the source object. The range value must use the form
      *          bytes=first-last, where the first and last are the zero-based byte offsets to copy. For
      *          example, bytes=0-9 indicates that you want to copy the first 10 bytes of the source. You
@@ -1344,67 +2786,102 @@ export interface UploadPartCopyRequest {
      */
     CopySourceRange?: string;
     /**
+     * @public
      * <p>Object key for which the multipart upload was initiated.</p>
      */
     Key: string | undefined;
     /**
+     * @public
      * <p>Part number of part being copied. This is a positive integer between 1 and
      *          10,000.</p>
      */
     PartNumber: number | undefined;
     /**
+     * @public
      * <p>Upload ID identifying the multipart upload whose part is being copied.</p>
      */
     UploadId: string | undefined;
     /**
-     * <p>Specifies the algorithm to use to when encrypting the object (for example,
+     * @public
+     * <p>Specifies the algorithm to use when encrypting the object (for example,
      *          AES256).</p>
+     *          <note>
+     *             <p>This functionality is not supported when the destination bucket is a directory bucket.</p>
+     *          </note>
      */
     SSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>Specifies the customer-provided encryption key for Amazon S3 to use in encrypting data. This
      *          value is used to store the object and then it is discarded; Amazon S3 does not store the
      *          encryption key. The key must be appropriate for use with the algorithm specified in the
      *             <code>x-amz-server-side-encryption-customer-algorithm</code> header. This must be the
      *          same encryption key specified in the initiate multipart upload request.</p>
+     *          <note>
+     *             <p>This functionality is not supported when the destination bucket is a directory bucket.</p>
+     *          </note>
      */
     SSECustomerKey?: string;
     /**
+     * @public
      * <p>Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321. Amazon S3 uses
      *          this header for a message integrity check to ensure that the encryption key was transmitted
      *          without error.</p>
+     *          <note>
+     *             <p>This functionality is not supported when the destination bucket is a directory bucket.</p>
+     *          </note>
      */
     SSECustomerKeyMD5?: string;
     /**
+     * @public
      * <p>Specifies the algorithm to use when decrypting the source object (for example,
-     *          AES256).</p>
+     *          <code>AES256</code>).</p>
+     *          <note>
+     *             <p>This functionality is not supported when the source object is in a directory bucket.</p>
+     *          </note>
      */
     CopySourceSSECustomerAlgorithm?: string;
     /**
+     * @public
      * <p>Specifies the customer-provided encryption key for Amazon S3 to use to decrypt the source
      *          object. The encryption key provided in this header must be one that was used when the
      *          source object was created.</p>
+     *          <note>
+     *             <p>This functionality is not supported when the source object is in a directory bucket.</p>
+     *          </note>
      */
     CopySourceSSECustomerKey?: string;
     /**
+     * @public
      * <p>Specifies the 128-bit MD5 digest of the encryption key according to RFC 1321. Amazon S3 uses
      *          this header for a message integrity check to ensure that the encryption key was transmitted
      *          without error.</p>
+     *          <note>
+     *             <p>This functionality is not supported when the source object is in a directory bucket.</p>
+     *          </note>
      */
     CopySourceSSECustomerKeyMD5?: string;
     /**
+     * @public
      * <p>Confirms that the requester knows that they will be charged for the request. Bucket
-     *          owners need not specify this parameter in their requests. For information about downloading
-     *          objects from Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
+     *          owners need not specify this parameter in their requests. If either the source or
+     *          destination S3 bucket has Requester Pays enabled, the requester will pay for
+     *          corresponding charges to copy the object. For information about downloading objects from
+     *          Requester Pays buckets, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html">Downloading Objects in
      *             Requester Pays Buckets</a> in the <i>Amazon S3 User Guide</i>.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestPayer?: RequestPayer | string;
+    RequestPayer?: RequestPayer;
     /**
-     * <p>The account ID of the expected destination bucket owner. If the destination bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected destination bucket owner. If the account ID that you provide does not match the actual owner of the destination bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedBucketOwner?: string;
     /**
-     * <p>The account ID of the expected source bucket owner. If the source bucket is owned by a different account, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
+     * @public
+     * <p>The account ID of the expected source bucket owner. If the account ID that you provide does not match the actual owner of the source bucket, the request fails with the HTTP status code <code>403 Forbidden</code> (access denied).</p>
      */
     ExpectedSourceBucketOwner?: string;
 }
@@ -1413,19 +2890,23 @@ export interface UploadPartCopyRequest {
  */
 export interface WriteGetObjectResponseRequest {
     /**
+     * @public
      * <p>Route prefix to the HTTP URL generated.</p>
      */
     RequestRoute: string | undefined;
     /**
+     * @public
      * <p>A single use encrypted token that maps <code>WriteGetObjectResponse</code> to the end
      *          user <code>GetObject</code> request.</p>
      */
     RequestToken: string | undefined;
     /**
+     * @public
      * <p>The object data.</p>
      */
-    Body?: Readable | ReadableStream | Blob;
+    Body?: StreamingBlobTypes;
     /**
+     * @public
      * <p>The integer status code for an HTTP response of a corresponding <code>GetObject</code>
      *          request. The following is a list of status codes.</p>
      *          <ul>
@@ -1503,6 +2984,7 @@ export interface WriteGetObjectResponseRequest {
      */
     StatusCode?: number;
     /**
+     * @public
      * <p>A string that uniquely identifies an error condition. Returned in the <Code> tag
      *          of the error XML response for a corresponding <code>GetObject</code> call. Cannot be used
      *          with a successful <code>StatusCode</code> header or when the transformed object is provided
@@ -1511,6 +2993,7 @@ export interface WriteGetObjectResponseRequest {
      */
     ErrorCode?: string;
     /**
+     * @public
      * <p>Contains a generic description of the error condition. Returned in the <Message>
      *          tag of the error XML response for a corresponding <code>GetObject</code> call. Cannot be
      *          used with a successful <code>StatusCode</code> header or when the transformed object is
@@ -1518,40 +3001,49 @@ export interface WriteGetObjectResponseRequest {
      */
     ErrorMessage?: string;
     /**
+     * @public
      * <p>Indicates that a range of bytes was specified.</p>
      */
     AcceptRanges?: string;
     /**
+     * @public
      * <p>Specifies caching behavior along the request/reply chain.</p>
      */
     CacheControl?: string;
     /**
+     * @public
      * <p>Specifies presentational information for the object.</p>
      */
     ContentDisposition?: string;
     /**
+     * @public
      * <p>Specifies what content encodings have been applied to the object and thus what decoding
      *          mechanisms must be applied to obtain the media-type referenced by the Content-Type header
      *          field.</p>
      */
     ContentEncoding?: string;
     /**
+     * @public
      * <p>The language the content is in.</p>
      */
     ContentLanguage?: string;
     /**
+     * @public
      * <p>The size of the content body in bytes.</p>
      */
     ContentLength?: number;
     /**
+     * @public
      * <p>The portion of the object returned in the response.</p>
      */
     ContentRange?: string;
     /**
+     * @public
      * <p>A standard MIME type describing the format of the object data.</p>
      */
     ContentType?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is
      *          the same data that was originally sent. This specifies the base64-encoded, 32-bit CRC32
      *          checksum of the object returned by the Object Lambda function. This may not match the
@@ -1565,6 +3057,7 @@ export interface WriteGetObjectResponseRequest {
      */
     ChecksumCRC32?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is
      *          the same data that was originally sent. This specifies the base64-encoded, 32-bit CRC32C
      *          checksum of the object returned by the Object Lambda function. This may not match the
@@ -1577,6 +3070,7 @@ export interface WriteGetObjectResponseRequest {
      */
     ChecksumCRC32C?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is
      *          the same data that was originally sent. This specifies the base64-encoded, 160-bit SHA-1
      *          digest of the object returned by the Object Lambda function. This may not match the
@@ -1589,6 +3083,7 @@ export interface WriteGetObjectResponseRequest {
      */
     ChecksumSHA1?: string;
     /**
+     * @public
      * <p>This header can be used as a data integrity check to verify that the data received is
      *          the same data that was originally sent. This specifies the base64-encoded, 256-bit SHA-256
      *          digest of the object returned by the Object Lambda function. This may not match the
@@ -1601,20 +3096,24 @@ export interface WriteGetObjectResponseRequest {
      */
     ChecksumSHA256?: string;
     /**
+     * @public
      * <p>Specifies whether an object stored in Amazon S3 is (<code>true</code>) or is not
      *             (<code>false</code>) a delete marker. </p>
      */
     DeleteMarker?: boolean;
     /**
+     * @public
      * <p>An opaque identifier assigned by a web server to a specific version of a resource found
      *          at a URL. </p>
      */
     ETag?: string;
     /**
+     * @public
      * <p>The date and time at which the object is no longer cacheable.</p>
      */
     Expires?: Date;
     /**
+     * @public
      * <p>If the object expiration is configured (see PUT Bucket lifecycle), the response includes
      *          this header. It includes the <code>expiry-date</code> and <code>rule-id</code> key-value
      *          pairs that provide the object expiration information. The value of the <code>rule-id</code>
@@ -1622,10 +3121,12 @@ export interface WriteGetObjectResponseRequest {
      */
     Expiration?: string;
     /**
+     * @public
      * <p>The date and time that the object was last modified.</p>
      */
     LastModified?: Date;
     /**
+     * @public
      * <p>Set to the number of metadata entries not returned in <code>x-amz-meta</code> headers.
      *          This can happen if you create metadata using an API like SOAP that supports more flexible
      *          metadata than the REST API. For example, using SOAP, you can create metadata whose values
@@ -1633,57 +3134,72 @@ export interface WriteGetObjectResponseRequest {
      */
     MissingMeta?: number;
     /**
+     * @public
      * <p>A map of metadata to store with the object in S3.</p>
      */
     Metadata?: Record<string, string>;
     /**
+     * @public
      * <p>Indicates whether an object stored in Amazon S3 has Object Lock enabled. For more information
      *          about S3 Object Lock, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html">Object Lock</a>.</p>
      */
-    ObjectLockMode?: ObjectLockMode | string;
+    ObjectLockMode?: ObjectLockMode;
     /**
+     * @public
      * <p>Indicates whether an object stored in Amazon S3 has an active legal hold.</p>
      */
-    ObjectLockLegalHoldStatus?: ObjectLockLegalHoldStatus | string;
+    ObjectLockLegalHoldStatus?: ObjectLockLegalHoldStatus;
     /**
+     * @public
      * <p>The date and time when Object Lock is configured to expire.</p>
      */
     ObjectLockRetainUntilDate?: Date;
     /**
+     * @public
      * <p>The count of parts this object has.</p>
      */
     PartsCount?: number;
     /**
+     * @public
      * <p>Indicates if request involves bucket that is either a source or destination in a
      *          Replication rule. For more information about S3 Replication, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication.html">Replication</a>.</p>
      */
-    ReplicationStatus?: ReplicationStatus | string;
+    ReplicationStatus?: ReplicationStatus;
     /**
+     * @public
      * <p>If present, indicates that the requester was successfully charged for the
      *          request.</p>
+     *          <note>
+     *             <p>This functionality is not supported for directory buckets.</p>
+     *          </note>
      */
-    RequestCharged?: RequestCharged | string;
+    RequestCharged?: RequestCharged;
     /**
+     * @public
      * <p>Provides information about object restoration operation and expiration time of the
      *          restored object copy.</p>
      */
     Restore?: string;
     /**
+     * @public
      * <p> The server-side encryption algorithm used when storing requested object in Amazon S3 (for
      *          example, AES256, <code>aws:kms</code>).</p>
      */
-    ServerSideEncryption?: ServerSideEncryption | string;
+    ServerSideEncryption?: ServerSideEncryption;
     /**
+     * @public
      * <p>Encryption algorithm used if server-side encryption with a customer-provided encryption
      *          key was specified for object stored in Amazon S3.</p>
      */
     SSECustomerAlgorithm?: string;
     /**
-     * <p> If present, specifies the ID of the Amazon Web Services Key Management Service (Amazon Web Services KMS) symmetric
+     * @public
+     * <p> If present, specifies the ID (Key ID, Key ARN, or Key Alias) of the Amazon Web Services Key Management Service (Amazon Web Services KMS) symmetric
      *          encryption customer managed key that was used for stored in Amazon S3 object. </p>
      */
     SSEKMSKeyId?: string;
     /**
+     * @public
      * <p> 128-bit MD5 digest of customer-provided encryption key used in Amazon S3 to encrypt data
      *          stored in S3. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html">Protecting data
      *             using server-side encryption with customer-provided encryption keys
@@ -1691,25 +3207,37 @@ export interface WriteGetObjectResponseRequest {
      */
     SSECustomerKeyMD5?: string;
     /**
+     * @public
      * <p>Provides storage class information of the object. Amazon S3 returns this header for all
      *          objects except for S3 Standard storage class objects.</p>
      *          <p>For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html">Storage Classes</a>.</p>
      */
-    StorageClass?: StorageClass | string;
+    StorageClass?: StorageClass;
     /**
+     * @public
      * <p>The number of tags, if any, on the object.</p>
      */
     TagCount?: number;
     /**
+     * @public
      * <p>An ID used to reference a specific version of the object.</p>
      */
     VersionId?: string;
     /**
+     * @public
      * <p> Indicates whether the object stored in Amazon S3 uses an S3 bucket key for server-side
      *          encryption with Amazon Web Services KMS (SSE-KMS).</p>
      */
     BucketKeyEnabled?: boolean;
 }
+/**
+ * @internal
+ */
+export declare const PutObjectOutputFilterSensitiveLog: (obj: PutObjectOutput) => any;
+/**
+ * @internal
+ */
+export declare const PutObjectRequestFilterSensitiveLog: (obj: PutObjectRequest) => any;
 /**
  * @internal
  */