AWS AmazonS3 documentation change
Summary
Formatting adjustments to API references (removed backticks from links), clarified SHA-256 family notation, and minor syntax fixes (e.g., `gzip` formatting). No substantive changes to checksum functionality.
Security assessment
Changes are purely editorial (formatting links, clarifying algorithm family names, and syntax examples). No evidence of addressing vulnerabilities or introducing new security controls. The documentation continues to describe existing checksum validation features without altering their security implications.
Diff
diff --git a/AmazonS3/latest/userguide/checking-object-integrity.md b/AmazonS3/latest/userguide/checking-object-integrity.md index 10a2117e6..b6495b5ca 100644 --- a//AmazonS3/latest/userguide/checking-object-integrity.md +++ b//AmazonS3/latest/userguide/checking-object-integrity.md @@ -29 +29 @@ With Amazon S3, you can choose a checksum algorithm to validate your data during - * SHA-256 (`SHA256`) + * SHA-256 (`SHA256`) (SHA-2 family) @@ -67 +67 @@ In Amazon S3, there are two types of supported checksums: -All PUT requests require a full object checksum type. +All `PUT` requests require a full object checksum type. @@ -99 +99 @@ If you're using a `SHA-1` or `SHA-256` checksum algorithm for a multipart upload -Checksums of objects that are uploaded in a single part (using [`PutObject`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html#API_PutObject)) are treated as full object checksums. When you upload an object in the Amazon S3 console, you can choose the checksum algorithm that you want S3 to use and also (optionally) provide a precomputed value. Amazon S3 then validates this checksum before storing the object and its checksum value. You can verify an object's data integrity when you request the checksum value during object downloads. +Checksums of objects that are uploaded in a single part (using [PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html#API_PutObject)) are treated as full object checksums. When you upload an object in the Amazon S3 console, you can choose the checksum algorithm that you want S3 to use and also (optionally) provide a precomputed value. Amazon S3 then validates this checksum before storing the object and its checksum value. You can verify an object's data integrity when you request the checksum value during object downloads. @@ -103 +103 @@ Checksums of objects that are uploaded in a single part (using [`PutObject`](htt -When you upload the object in multiple parts using the [`MultipartUpload`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_MultipartUpload.html) API, you can specify the checksum algorithm that you want Amazon S3 to use and the checksum type (full object or composite). +When you upload the object in multiple parts using the [MultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_MultipartUpload.html) API, you can specify the checksum algorithm that you want Amazon S3 to use and the checksum type (full object or composite). @@ -117 +117 @@ SHA-256 (`SHA256`) | No | Yes -When creating or performing a multipart upload, you can use full object checksums for validation on upload. This means that you can provide the checksum algorithm for the [`MultipartUpload`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_MultipartUpload.html) API, simplifying your integrity validation tooling because you no longer need to track part boundaries for uploaded objects. You can provide the checksum of the whole object in the [`CompleteMultipartUpload`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html) request, along with the object size. +When creating or performing a multipart upload, you can use full object checksums for validation on upload. This means that you can provide the checksum algorithm for the [MultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_MultipartUpload.html) API, simplifying your integrity validation tooling because you no longer need to track part boundaries for uploaded objects. You can provide the checksum of the whole object in the [CompleteMultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html) request, along with the object size. @@ -137 +137 @@ When uploading a part of the multipart upload, be aware of the following: - * To retrieve information about the object, including how many parts make up the entire object, you can use the [`GetObjectAttributes`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) operation. With additional checksums, you can also recover information for each individual part that includes the part's checksum value. + * To retrieve information about the object, including how many parts make up the entire object, you can use the [GetObjectAttributes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) operation. With additional checksums, you can also recover information for each individual part that includes the part's checksum value. @@ -139 +139 @@ When uploading a part of the multipart upload, be aware of the following: - * For completed uploads, you can get an individual part's checksum by using the [`GetObject`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) or [`HeadObject`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadObject.html) operations and specifying a part number or byte range that aligns with a single part. If you want to retrieve the checksum values for individual parts of multipart uploads that are still in progress, you can use [`ListParts`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html). + * For completed uploads, you can get an individual part's checksum by using the [GetObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) or [HeadObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadObject.html) operations and specifying a part number or byte range that aligns with a single part. If you want to retrieve the checksum values for individual parts of multipart uploads that are still in progress, you can use [ListParts](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html). @@ -141 +141 @@ When uploading a part of the multipart upload, be aware of the following: - * Because of how Amazon S3 calculates the checksum for multipart objects, the checksum value for the object might change if you copy it. If you're using an SDK or the REST API and you call [`CopyObject`](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html), Amazon S3 copies any object up to the size limitations of the `CopyObject` API operation. Amazon S3 does this copy as a single action, regardless of whether the object was uploaded in a single request or as part of a multipart upload. With a copy command, the checksum of the object is a direct checksum of the full object. If the object was originally uploaded using a multipart upload, the checksum value changes even though the data doesn't. + * Because of how Amazon S3 calculates the checksum for multipart objects, the checksum value for the object might change if you copy it. If you're using an SDK or the REST API and you call [CopyObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html), Amazon S3 copies any object up to the size limitations of the `CopyObject` API operation. Amazon S3 does this copy as a single action, regardless of whether the object was uploaded in a single request or as part of a multipart upload. With a copy command, the checksum of the object is a direct checksum of the full object. If the object was originally uploaded using a multipart upload, the checksum value changes even though the data doesn't. @@ -418 +418 @@ You can send REST requests to upload an object with a checksum value to verify t -You can send a `PUT` request to upload an object of up to 5 GB in a single operation. For more information, see the [`PutObject`](https://docs.aws.amazon.com/cli/latest/reference/s3api/put-object.html#examples) in the _AWS CLI Command Reference_. You can also use [`get-object`](https://docs.aws.amazon.com/cli/latest/reference/s3api/get-object.html) and [`head-object`](https://docs.aws.amazon.com/cli/latest/reference/s3api/head-object.html) to retrieve the checksum of an already-uploaded object to verify the integrity of the data. +You can send a `PUT` request to upload an object of up to 5 GB in a single operation. For more information, see the [PutObject](https://docs.aws.amazon.com/cli/latest/reference/s3api/put-object.html#examples) in the _AWS CLI Command Reference_. You can also use [get-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/get-object.html) and [head-object](https://docs.aws.amazon.com/cli/latest/reference/s3api/head-object.html) to retrieve the checksum of an already-uploaded object to verify the integrity of the data. @@ -482 +482 @@ To make a chunked content encoding request, Amazon S3 requires clients to includ -You can also include the `Content-Encoding` header, with the chunked value, in your request. While this header isn’t required, including this header can minimize HTTP proxy issues when transmitting encoded data. If another `Content-Encoding` header (such as gzip) exists in the request, the `Content-Encoding` header includes the chunked value in a comma-separated list of encodings. For example, `Content-Encoding: aws-chunked, gzip`. +You can also include the `Content-Encoding` header, with the chunked value, in your request. While this header isn’t required, including this header can minimize HTTP proxy issues when transmitting encoded data. If another `Content-Encoding` header (such as `gzip`) exists in the request, the `Content-Encoding` header includes the chunked value in a comma-separated list of encodings. For example, `Content-Encoding: aws-chunked, gzip`.