AWS Security ChangesHomeSearch

AWS AmazonS3 documentation change

Service: AmazonS3 · 2026-04-25 · Documentation low

File: AmazonS3/latest/userguide/checking-object-integrity-at-rest.md

Summary

Updated checksum algorithm documentation to specify MD5 now only supports composite checksum type (non-linearizable) and added four new checksum algorithms (XXHash64, XXHash3, XXHash128, SHA-512) that also only support composite checksum type.

Security assessment

This change documents expanded checksum algorithm support for data integrity verification at rest. While checksums are security-related for data integrity, there's no evidence this addresses a specific security vulnerability. The change adds documentation about security features (integrity verification) but doesn't indicate a security issue was fixed.

Diff

diff --git a/AmazonS3/latest/userguide/checking-object-integrity-at-rest.md b/AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
index 2b6e416d8..f3d50880a 100644
--- a//AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
+++ b//AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
@@ -33 +33,9 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * MD5 (`MD5`): Supports both full object and composite checksum types.
+  * MD5 (`MD5`): Supports composite checksum type only (non-linearizable).
+
+  * XXHash64 (`XXHASH64`): Supports composite checksum type only (non-linearizable).
+
+  * XXHash3 (`XXHASH3`): Supports composite checksum type only (non-linearizable).
+
+  * XXHash128 (`XXHASH128`): Supports composite checksum type only (non-linearizable).
+
+  * SHA-512 (`SHA512`): Supports composite checksum type only (non-linearizable).