@@ -1601,7 +1601,9 @@ public function getObjectTagging($input): GetObjectTaggingOutput
1601
1601
*
1602
1602
* - **General purpose bucket permissions** - To use `HEAD`, you must have the `s3:GetObject` permission. You need the
1603
1603
* relevant read object (or version) permission for this operation. For more information, see Actions, resources,
1604
- * and condition keys for Amazon S3 [^2] in the *Amazon S3 User Guide*.
1604
+ * and condition keys for Amazon S3 [^2] in the *Amazon S3 User Guide*. For more information about the permissions
1605
+ * to S3 API operations by S3 resource types, see Required permissions for Amazon S3 API operations [^3] in the
1606
+ * *Amazon S3 User Guide*.
1605
1607
*
1606
1608
* If the object you request doesn't exist, the error that Amazon S3 returns depends on whether you also have the
1607
1609
* `s3:ListBucket` permission.
@@ -1612,13 +1614,13 @@ public function getObjectTagging($input): GetObjectTaggingOutput
1612
1614
* error.
1613
1615
*
1614
1616
* - **Directory bucket permissions** - To grant access to this API operation on a directory bucket, we recommend that
1615
- * you use the `CreateSession` [^3 ] API operation for session-based authorization. Specifically, you grant the
1617
+ * you use the `CreateSession` [^4 ] API operation for session-based authorization. Specifically, you grant the
1616
1618
* `s3express:CreateSession` permission to the directory bucket in a bucket policy or an IAM identity-based policy.
1617
1619
* Then, you make the `CreateSession` API call on the bucket to obtain a session token. With the session token in
1618
1620
* your request header, you can make API requests to this operation. After the session token expires, you make
1619
1621
* another `CreateSession` API call to generate a new session token for use. Amazon Web Services CLI or SDKs create
1620
1622
* session and refresh the session token automatically to avoid service interruptions when a session expires. For
1621
- * more information about authorization, see `CreateSession` [^4 ].
1623
+ * more information about authorization, see `CreateSession` [^5 ].
1622
1624
*
1623
1625
* If you enable `x-amz-checksum-mode` in the request and the object is encrypted with Amazon Web Services Key
1624
1626
* Management Service (Amazon Web Services KMS), you must also have the `kms:GenerateDataKey` and `kms:Decrypt`
@@ -1643,12 +1645,12 @@ public function getObjectTagging($input): GetObjectTaggingOutput
1643
1645
* - `x-amz-server-side-encryption-customer-key`
1644
1646
* - `x-amz-server-side-encryption-customer-key-MD5`
1645
1647
*
1646
- * For more information about SSE-C, see Server-Side Encryption (Using Customer-Provided Encryption Keys) [^5 ] in the
1648
+ * For more information about SSE-C, see Server-Side Encryption (Using Customer-Provided Encryption Keys) [^6 ] in the
1647
1649
* *Amazon S3 User Guide*.
1648
1650
*
1649
1651
* > **Directory bucket ** - For directory buckets, there are only two supported options for server-side encryption:
1650
1652
* > SSE-S3 and SSE-KMS. SSE-C isn't supported. For more information, see Protecting data with server-side encryption
1651
- * > [^6 ] in the *Amazon S3 User Guide*.
1653
+ * > [^7 ] in the *Amazon S3 User Guide*.
1652
1654
*
1653
1655
* - `Versioning`:
1654
1656
*
@@ -1670,23 +1672,24 @@ public function getObjectTagging($input): GetObjectTaggingOutput
1670
1672
* > For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints
1671
1673
* > support virtual-hosted-style requests in the format
1672
1674
* > `https://*bucket_name*.s3express-*az_id*.*region*.amazonaws.com/*key-name*`. Path-style requests are not
1673
- * > supported. For more information, see Regional and Zonal endpoints [^7 ] in the *Amazon S3 User Guide*.
1675
+ * > supported. For more information, see Regional and Zonal endpoints [^8 ] in the *Amazon S3 User Guide*.
1674
1676
*
1675
1677
*
1676
1678
* The following actions are related to `HeadObject`:
1677
1679
*
1678
- * - GetObject [^8 ]
1679
- * - GetObjectAttributes [^9 ]
1680
+ * - GetObject [^9 ]
1681
+ * - GetObjectAttributes [^10 ]
1680
1682
*
1681
1683
* [^1]: https://docs.aws.amazon.com/AmazonS3/latest/API/RESTCommonRequestHeaders.html
1682
1684
* [^2]: https://docs.aws.amazon.com/AmazonS3/latest/dev/list_amazons3.html
1683
- * [^3]: https://docs.aws.amazon.com/ AmazonS3/latest/API/API_CreateSession .html
1685
+ * [^3]: / AmazonS3/latest/userguide/using-with-s3-policy-actions .html
1684
1686
* [^4]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html
1685
- * [^5]: https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
1686
- * [^6]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-serv-side-encryption.html
1687
- * [^7]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html
1688
- * [^8]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html
1689
- * [^9]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html
1687
+ * [^5]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html
1688
+ * [^6]: https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
1689
+ * [^7]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-serv-side-encryption.html
1690
+ * [^8]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html
1691
+ * [^9]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html
1692
+ * [^10]: https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html
1690
1693
*
1691
1694
* @see http://docs.amazonwebservices.com/AmazonS3/latest/API/RESTObjectHEAD.html
1692
1695
* @see https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadObject.html
0 commit comments