AWS Security ChangesHomeSearch

AWS AmazonS3 documentation change

Service: AmazonS3 · 2026-06-22 · Documentation low

File: AmazonS3/latest/userguide/checking-object-integrity-at-rest.md

Summary

Updated checksum algorithm documentation: Clarified that all algorithms support both full object and composite checksums except CRC-64/NVME, reordered algorithm list, and added SHA-512 entry.

Security assessment

This change improves documentation of checksum algorithms used for data integrity verification at rest. While data integrity is a security feature, there's no evidence this addresses a specific vulnerability. The changes are informational updates about existing security capabilities.

Diff

diff --git a/AmazonS3/latest/userguide/checking-object-integrity-at-rest.md b/AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
index f3d50880a..fee3a6535 100644
--- a//AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
+++ b//AmazonS3/latest/userguide/checking-object-integrity-at-rest.md
@@ -23 +23 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * CRC-64/NVME (`CRC64NVME`): Supports the full object checksum type only.
+All supported checksum algorithms support both the full object and composite checksum types, except CRC-64/NVME (`CRC64NVME`), which supports the full object checksum type only.
@@ -25 +25 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * CRC-32 (`CRC32`): Supports both full object and composite checksum types.
+  * CRC-64/NVME (`CRC64NVME`)
@@ -27 +27 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * CRC-32C (`CRC32C`): Supports both full object and composite checksum types.
+  * CRC-32 (`CRC32`)
@@ -29 +29 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * SHA-1 (`SHA1`): Supports both full object and composite checksum types.
+  * CRC-32C (`CRC32C`)
@@ -31 +31 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * SHA-256 (`SHA256`): Supports both full object and composite checksum types.
+  * SHA-1 (`SHA1`)
@@ -33 +33 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * MD5 (`MD5`): Supports composite checksum type only (non-linearizable).
+  * SHA-256 (`SHA256`)
@@ -35 +35 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * XXHash64 (`XXHASH64`): Supports composite checksum type only (non-linearizable).
+  * MD5 (`MD5`)
@@ -37 +37 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * XXHash3 (`XXHASH3`): Supports composite checksum type only (non-linearizable).
+  * XXHash64 (`XXHASH64`)
@@ -39 +39 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * XXHash128 (`XXHASH128`): Supports composite checksum type only (non-linearizable).
+  * XXHash3 (`XXHASH3`)
@@ -41 +41,3 @@ For data at rest, you can calculate checksums, using any of the supported checks
-  * SHA-512 (`SHA512`): Supports composite checksum type only (non-linearizable).
+  * XXHash128 (`XXHASH128`)
+
+  * SHA-512 (`SHA512`)