AWS cli documentation change

Service: cli · 2026-03-31 · Documentation medium

File: cli/latest/topic/s3-config.md

Summary

Added new configuration option 'disable_s3_express_session_auth' for S3 Express One Zone directory buckets, allowing users to disable S3 Express session authentication.

Security assessment

This change introduces documentation for a new configuration option that controls authentication behavior for S3 Express One Zone. It allows disabling a security feature (S3 Express session authentication) which is enabled by default for performance. This is a security-related configuration option, but there is no evidence it addresses a specific security vulnerability; it's a new feature for controlling authentication methods.

Diff

diff --git a/cli/latest/topic/s3-config.md b/cli/latest/topic/s3-config.md
index 3cdb7cbf8..cd5ed9b7f 100644
--- a//cli/latest/topic/s3-config.md
+++ b//cli/latest/topic/s3-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.19 Command Reference](../index.html) »
+  * [AWS CLI 2.34.20 Command Reference](../index.html) »
@@ -41,0 +42 @@
+      * disable_s3_express_session_auth
@@ -99,0 +101,2 @@ These are the configuration values that can be set for both `aws s3` and `aws s3
+Additionally, the `disable_s3_express_session_auth` configuration value can be set for both `aws s3` and `aws s3api` commands. Unlike the other S3 configuration values, this value is set at the profile level and not under the `s3` key.
+
@@ -220,0 +224,21 @@ By default, this is disabled for streaming uploads (UploadPart and PutObject), b
+### disable_s3_express_session_auth¶
+
+**Default** \- `false`
+
+If set to `true`, the client will not use S3 Express session authentication for S3 Express One Zone directory buckets. By default, S3 Express session authentication is enabled for requests to S3 Express One Zone directory buckets. S3 Express session authentication provides optimized authentication for high performance workloads with S3 Express One Zone.
+
+Unlike other S3 configuration values, this value must be set at the profile level in the AWS Config File and not under the `s3` key. For example:
+    
+    
+    [profile development]
+    aws_access_key_id=foo
+    aws_secret_access_key=bar
+    disable_s3_express_session_auth = true
+    
+
+To set this value programmatically using the `aws configure set` command:
+    
+    
+    $ aws configure set default.disable_s3_express_session_auth true
+    
+
@@ -319 +343 @@ There are currently no experimental configuration values.
-  * [AWS CLI 2.34.19 Command Reference](../index.html) »
+  * [AWS CLI 2.34.20 Command Reference](../index.html) »