AWS AmazonSimpleDB documentation change
Summary
Added multiple new error codes and descriptions related to export operations, KMS key validation, S3 permissions, and parameter constraints
Security assessment
The changes document security-related error conditions such as KMS key access issues (KmsAccessDeniedException, KmsDisabledException), S3 bucket permissions (S3AccessDenied, S3InvalidBucketOwnerAWSAccountID), and encryption parameter validation (S3SseAlgorithm). These additions help users understand security-sensitive failure scenarios but do not indicate a direct fix for a disclosed vulnerability.
Diff
diff --git a/AmazonSimpleDB/latest/DeveloperGuide/APIError.md b/AmazonSimpleDB/latest/DeveloperGuide/APIError.md index d09a030d1..66d0e0c40 100644 --- a//AmazonSimpleDB/latest/DeveloperGuide/APIError.md +++ b//AmazonSimpleDB/latest/DeveloperGuide/APIError.md @@ -104,0 +105,34 @@ Error | Description | HTTP Status Code +`ConflictException` | Idempotent request failed due to parameter mismatch. | 409 Conflict +`DeleteConflictException` | Cannot delete domain due to a PENDING or IN_PROGRESS export. | 409 Conflict +`ExportTimedOut` | The export operation timed out and could not be completed. Try again. | 500 Internal Server Error +`InvalidNextTokenException` | The specified next token is not valid. | 400 Bad Request +`InvalidParameterCombinationException` | Parameter S3SseKmsKeyId must be provided only when S3SseAlgorithm is KMS. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter ClientToken is invalid. ClientToken must be between 1 and 128 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter ClientToken is invalid. ClientToken must only contain ASCII characters in the range of 33-126, inclusive. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter DomainName is invalid. DomainName must be between 3 and 255 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter DomainName is invalid. DomainName must only contain letters, numbers, underscores, periods, and hyphens. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter ExportArn is invalid. ExportArn must be between 20 and 2048 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter ExportArn is invalid. ExportArn must be a valid Amazon SimpleDB Domain Export ARN. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter MaxResults is invalid. MaxResults must be between 1 and 100. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter NextToken is invalid. NextToken must be between 1 and 2048 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter NextToken is invalid. NextToken must only contain letters, numbers, underscores, hyphens, and equals signs. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3BucketName is invalid. S3BucketName must be between 3 and 63 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3BucketOwner is invalid. S3BucketOwner must be a valid AWS account ID. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3KeyPrefix is invalid. S3KeyPrefix must be between 1 and 850 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3SseAlgorithm is invalid. S3SseAlgorithm can only be AES256 or KMS. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3SseKmsKeyId is invalid. S3SseKmsKeyId must be between 1 and 2048 characters long. | 400 Bad Request +`InvalidParameterValueException` | Value (" + value + ") for parameter S3SseKmsKeyId is invalid. S3SseKmsKeyId must only contain letters, numbers, underscores, colons, and hyphens. | 400 Bad Request +`KmsAccessDeniedException` | An error occurred during the export. Access to the specified KMS key is denied. | 400 Bad Request +`KmsDisabledException` | An error occurred during the export. The specified KMS key is disabled. | 400 Bad Request +`KmsInvalidKeyUsageException` | An error occurred during the export. The expected KMS key usage is ENCRYPT_DECRYPT. | 400 Bad Request +`KmsInvalidStateException` | An error occurred during the export. The specified KMS key is in an invalid state. | 400 Bad Request +`KmsNotFoundException` | An error occurred during the export. The specified KMS key does not exist. | 400 Bad Request +`NoSuchDomainException` | The specified domain does not exist. | 400 Bad Request +`NoSuchExportException` | The specified export does not exist. | 400 Bad Request +`NumberDomainExportsExceeded` | The export limit was exceeded. | 409 Conflict +`S3AccessDenied` | Export failed due to insufficient access to the Amazon S3 bucket. | 403 Forbidden +`S3AccountProblem` | Export failed due to a problem with your AWS account. | 403 Forbidden +`S3AllAccessDisabled` | Export failed due to insufficient access to the Amazon S3 bucket. | 403 Forbidden +`S3InvalidBucketOwnerAWSAccountID` | Export failed due to insufficient access to the Amazon S3 bucket. | 403 Forbidden +`S3NoSuchBucket` | An error occurred during the export. The specified Amazon S3 bucket does not exist. | 404 Not Found +`S3NotSignedUp` | Export failed due to a problem with your AWS account. | 403 Forbidden @@ -112 +146 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Select +StartDomainExport