AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-25 · Documentation low

File: cli/latest/reference/s3api/put-object.md

Summary

Added documentation for new checksum algorithm options (SHA512, MD5, XXHASH64, XXHASH3, XXHASH128) in the AWS CLI put-object command for data integrity verification.

Security assessment

The change adds new checksum algorithm options for data integrity verification, which is a security feature that helps ensure data hasn't been corrupted during transmission or storage. However, there's no evidence this addresses a specific security vulnerability or incident - it appears to be a feature enhancement adding support for additional checksum algorithms beyond the existing SHA256 support.

Diff

diff --git a/cli/latest/reference/s3api/put-object.md b/cli/latest/reference/s3api/put-object.md
index 72344a1e0..91754029b 100644
--- a//cli/latest/reference/s3api/put-object.md
+++ b//cli/latest/reference/s3api/put-object.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
@@ -165,0 +166,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200
+    [--checksum-sha512 <value>]
+    [--checksum-md5 <value>]
+    [--checksum-xxhash64 <value>]
+    [--checksum-xxhash3 <value>]
+    [--checksum-xxhash128 <value>]
@@ -309,0 +315 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200
+>   * `MD5`
@@ -311,0 +318,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200
+>   * `SHA512`
+>   * `XXHASH3`
+>   * `XXHASH64`
+>   * `XXHASH128`
@@ -331,0 +342,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200
+>   * `SHA512`
+>   * `MD5`
+>   * `XXHASH64`
+>   * `XXHASH3`
+>   * `XXHASH128`
@@ -354,0 +370,20 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200
+`--checksum-sha512` (string)
+
+> This header can be used as a data integrity check to verify that the data received is the same data that was originally sent. This header specifies the Base64 encoded, 512-bit `SHA512` digest of the object. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+`--checksum-md5` (string)
+
+> This header can be used as a data integrity check to verify that the data received is the same data that was originally sent. This header specifies the Base64 encoded, 128-bit `MD5` digest of the object. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+`--checksum-xxhash64` (string)
+
+> This header can be used as a data integrity check to verify that the data received is the same data that was originally sent. This header specifies the Base64 encoded, 64-bit `XXHASH64` checksum of the object. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+`--checksum-xxhash3` (string)
+
+> This header can be used as a data integrity check to verify that the data received is the same data that was originally sent. This header specifies the Base64 encoded, 64-bit `XXHASH3` checksum of the object. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+`--checksum-xxhash128` (string)
+
+> This header can be used as a data integrity check to verify that the data received is the same data that was originally sent. This header specifies the Base64 encoded, 128-bit `XXHASH128` checksum of the object. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
@@ -829,0 +865,20 @@ ChecksumSHA256 -> (string)
+ChecksumSHA512 -> (string)
+
+> The Base64 encoded, 512-bit `SHA512` digest of the object. This header is present if the object was uploaded with the `SHA512` checksum algorithm. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+ChecksumMD5 -> (string)
+
+> The Base64 encoded, 128-bit `MD5` digest of the object. This header is present if the object was uploaded with the `MD5` checksum algorithm. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+ChecksumXXHASH64 -> (string)
+
+> The Base64 encoded, 64-bit `XXHASH64` checksum of the object. This header is present if the object was uploaded with the `XXHASH64` checksum algorithm. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+ChecksumXXHASH3 -> (string)
+
+> The Base64 encoded, 64-bit `XXHASH3` checksum of the object. This header is present if the object was uploaded with the `XXHASH3` checksum algorithm. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
+ChecksumXXHASH128 -> (string)
+
+> The Base64 encoded, 128-bit `XXHASH128` checksum of the object. This header is present if the object was uploaded with the `XXHASH128` checksum algorithm. For more information, see [Checking object integrity in the Amazon S3 User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html) .
+
@@ -928 +983 @@ RequestCharged -> (string)
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »