AWS cli high security documentation change

Service: cli · 2025-08-19 · Security-related high

File: cli/latest/reference/s3control/create-job.md

Summary

Updated CLI version reference to 2.28.12, added header encoding warning, checksum documentation, and bucket owner validation

Security assessment

Added S3ComputeObjectChecksum ensures data integrity verification. ExpectedBucketOwner prevents confused deputy issues. Header encoding warning addresses request validation security

Diff

diff --git a/cli/latest/reference/s3control/create-job.md b/cli/latest/reference/s3control/create-job.md
index 0daa348fd..ea030dcbd 100644
--- a//cli/latest/reference/s3control/create-job.md
+++ b//cli/latest/reference/s3control/create-job.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.12 Command Reference](../../index.html) »
@@ -77,0 +78,4 @@ Related actions include:
+### Warning
+
+You must URL encode any signed header values that contain spaces. For example, if your header value is `my file.txt` , containing two spaces after `my` , you must URL encode this value to `my%20%20file.txt` .
+
@@ -468,0 +473,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3cont
+> 
+> S3ComputeObjectChecksum -> (structure)
+>
+>> Directs the specified job to compute checksum values for every object in the manifest.
+>> 
+>> ChecksumAlgorithm -> (string)
+>>
+>>> Indicates the algorithm that you want Amazon S3 to use to create the checksum. For more information, see [Checking object integrity](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) in the _Amazon S3 User Guide_ .
+>> 
+>> ChecksumType -> (string)
+>>
+>>> Indicates the checksum type that you want Amazon S3 to use to calculate the object’s checksum value. For more information, see [Checking object integrity](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) in the _Amazon S3 User Guide_ .
@@ -580,0 +597,4 @@ JSON Syntax:
+      },
+      "S3ComputeObjectChecksum": {
+        "ChecksumAlgorithm": "CRC32"|"CRC32C"|"CRC64NVME"|"MD5"|"SHA1"|"SHA256",
+        "ChecksumType": "FULL_OBJECT"|"COMPOSITE"
@@ -611,0 +632,4 @@ JSON Syntax:
+> 
+> ExpectedBucketOwner -> (string)
+>
+>> Lists the Amazon Web Services account ID that owns the target bucket, where the completion report is received.
@@ -616 +640 @@ Shorthand Syntax:
-    Bucket=string,Format=string,Enabled=boolean,Prefix=string,ReportScope=string
+    Bucket=string,Format=string,Enabled=boolean,Prefix=string,ReportScope=string,ExpectedBucketOwner=string
@@ -627 +651,2 @@ JSON Syntax:
-      "ReportScope": "AllTasks"|"FailedTasksOnly"
+      "ReportScope": "AllTasks"|"FailedTasksOnly",
+      "ExpectedBucketOwner": "string"
@@ -1050 +1075 @@ JobId -> (string)
-  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.12 Command Reference](../../index.html) »