@@ -210,7 +210,7 @@ public static Consumer<AwsRequestOverrideConfiguration.Builder> withAdditionalCo
210
210
.putExecutionAttribute (S3EncryptionClient .CONFIGURATION , multipartConfiguration );
211
211
}
212
212
213
- //= specification/s3-encryption/client.md#api-operations
213
+ //= specification/s3-encryption/client.md#optional- api-operations
214
214
//= type=implication
215
215
//# ReEncryptInstructionFile MAY be implemented by the S3EC.
216
216
/**
@@ -250,7 +250,7 @@ public ReEncryptInstructionFileResponse reEncryptInstructionFile(ReEncryptInstru
250
250
final byte [] iv = contentMetadata .contentIv ();
251
251
252
252
//Decrypt the data key using the current keyring
253
- //= specification/s3-encryption/client.md#api-operations
253
+ //= specification/s3-encryption/client.md#optional- api-operations
254
254
//= type=implication
255
255
//# ReEncryptInstructionFile MUST decrypt the instruction file's encrypted data key for the given object using the client's CMM.
256
256
DecryptionMaterials decryptedMaterials = this ._cryptoMaterialsManager .decryptMaterials (
@@ -271,7 +271,7 @@ public ReEncryptInstructionFileResponse reEncryptInstructionFile(ReEncryptInstru
271
271
.build ();
272
272
273
273
//Re-encrypt the data key with the new keyring while preserving other cryptographic parameters
274
- //= specification/s3-encryption/client.md#api-operations
274
+ //= specification/s3-encryption/client.md#optional- api-operations
275
275
//= type=implication
276
276
//# ReEncryptInstructionFile MUST re-encrypt the plaintext data key with a provided keyring.
277
277
RawKeyring newKeyring = reEncryptInstructionFileRequest .newKeyring ();
@@ -315,7 +315,7 @@ private void enforceRotation(EncryptionMaterials newEncryptionMaterials, GetObje
315
315
throw new S3EncryptionClientException ("Re-encryption failed due to enforced rotation! Old keyring is still able to decrypt the newly encrypted data key" );
316
316
}
317
317
318
- //= specification/s3-encryption/client.md#api-operations
318
+ //= specification/s3-encryption/client.md#required- api-operations
319
319
//= type=implication
320
320
//# PutObject MUST be implemented by the S3EC.
321
321
/**
@@ -355,7 +355,7 @@ public PutObjectResponse putObject(PutObjectRequest putObjectRequest, RequestBod
355
355
ExecutorService singleThreadExecutor = Executors .newSingleThreadExecutor ();
356
356
357
357
try {
358
- //= specification/s3-encryption/client.md#api-operations
358
+ //= specification/s3-encryption/client.md#required- api-operations
359
359
//= type=implication
360
360
//# PutObject MUST encrypt its input data before it is uploaded to S3.
361
361
CompletableFuture <PutObjectResponse > futurePut = pipeline .putObject (putObjectRequest ,
@@ -382,7 +382,7 @@ public PutObjectResponse putObject(PutObjectRequest putObjectRequest, RequestBod
382
382
383
383
}
384
384
385
- //= specification/s3-encryption/client.md#api-operations
385
+ //= specification/s3-encryption/client.md#required- api-operations
386
386
//= type=implication
387
387
//# GetObject MUST be implemented by the S3EC.
388
388
/**
@@ -406,7 +406,7 @@ public <T> T getObject(GetObjectRequest getObjectRequest,
406
406
ResponseTransformer <GetObjectResponse , T > responseTransformer )
407
407
throws AwsServiceException , SdkClientException {
408
408
409
- //= specification/s3-encryption/client.md#api-operations
409
+ //= specification/s3-encryption/client.md#required- api-operations
410
410
//= type=implication
411
411
//# GetObject MUST decrypt data received from the S3 server and return it as plaintext.
412
412
GetEncryptedObjectPipeline pipeline = GetEncryptedObjectPipeline .builder ()
@@ -516,7 +516,7 @@ private <T extends Throwable> T onAbort(UploadObjectObserver observer, T t) {
516
516
throw new S3EncryptionClientException (t .getMessage (), t );
517
517
}
518
518
519
- //= specification/s3-encryption/client.md#api-operations
519
+ //= specification/s3-encryption/client.md#required- api-operations
520
520
//= type=implication
521
521
//# DeleteObject MUST be implemented by the S3EC.
522
522
/**
@@ -536,11 +536,11 @@ public DeleteObjectResponse deleteObject(DeleteObjectRequest deleteObjectRequest
536
536
.build ();
537
537
538
538
try {
539
- //= specification/s3-encryption/client.md#api-operations
539
+ //= specification/s3-encryption/client.md#required- api-operations
540
540
//= type=implementation
541
541
//# DeleteObject MUST delete the given object key.
542
542
DeleteObjectResponse deleteObjectResponse = _wrappedAsyncClient .deleteObject (actualRequest ).join ();
543
- //= specification/s3-encryption/client.md#api-operations
543
+ //= specification/s3-encryption/client.md#required- api-operations
544
544
//= type=implementation
545
545
//# DeleteObject MUST delete the associated instruction file using the default instruction file suffix.
546
546
String instructionObjectKey = deleteObjectRequest .key () + DEFAULT_INSTRUCTION_FILE_SUFFIX ;
@@ -557,7 +557,7 @@ public DeleteObjectResponse deleteObject(DeleteObjectRequest deleteObjectRequest
557
557
}
558
558
}
559
559
560
- //= specification/s3-encryption/client.md#api-operations
560
+ //= specification/s3-encryption/client.md#required- api-operations
561
561
//= type=implication
562
562
//# DeleteObjects MUST be implemented by the S3EC.
563
563
/**
@@ -576,11 +576,11 @@ public DeleteObjectsResponse deleteObjects(DeleteObjectsRequest deleteObjectsReq
576
576
.overrideConfiguration (API_NAME_INTERCEPTOR )
577
577
.build ();
578
578
try {
579
- //= specification/s3-encryption/client.md#api-operations
579
+ //= specification/s3-encryption/client.md#required- api-operations
580
580
//= type=implementation
581
581
//# DeleteObjects MUST delete each of the given objects.
582
582
DeleteObjectsResponse deleteObjectsResponse = _wrappedAsyncClient .deleteObjects (actualRequest ).join ();
583
- //= specification/s3-encryption/client.md#api-operations
583
+ //= specification/s3-encryption/client.md#required- api-operations
584
584
//= type=implementation
585
585
//# DeleteObjects MUST delete each of the corresponding instruction files using the default instruction file suffix.
586
586
List <ObjectIdentifier > deleteObjects = instructionFileKeysToDelete (deleteObjectsRequest );
@@ -597,7 +597,7 @@ public DeleteObjectsResponse deleteObjects(DeleteObjectsRequest deleteObjectsReq
597
597
}
598
598
}
599
599
600
- //= specification/s3-encryption/client.md#api-operations
600
+ //= specification/s3-encryption/client.md#optional- api-operations
601
601
//= type=implication
602
602
//# CreateMultipartUpload MAY be implemented by the S3EC.
603
603
/**
@@ -621,7 +621,7 @@ public CreateMultipartUploadResponse createMultipartUpload(CreateMultipartUpload
621
621
}
622
622
}
623
623
624
- //= specification/s3-encryption/client.md#api-operations
624
+ //= specification/s3-encryption/client.md#optional- api-operations
625
625
//= type=implication
626
626
//# UploadPart MAY be implemented by the S3EC.
627
627
/**
@@ -647,7 +647,7 @@ public UploadPartResponse uploadPart(UploadPartRequest request, RequestBody requ
647
647
}
648
648
}
649
649
650
- //= specification/s3-encryption/client.md#api-operations
650
+ //= specification/s3-encryption/client.md#optional- api-operations
651
651
//= type=implication
652
652
//# CompleteMultipartUpload MAY be implemented by the S3EC.
653
653
/**
@@ -667,7 +667,7 @@ public CompleteMultipartUploadResponse completeMultipartUpload(CompleteMultipart
667
667
}
668
668
}
669
669
670
- //= specification/s3-encryption/client.md#api-operations
670
+ //= specification/s3-encryption/client.md#optional- api-operations
671
671
//= type=implication
672
672
//# AbortMultipartUpload MAY be implemented by the S3EC.
673
673
/**
@@ -965,7 +965,7 @@ public Builder enableMultipartPutObject(boolean _enableMultipartPutObject) {
965
965
966
966
//= specification/s3-encryption/client.md#set-buffer-size
967
967
//= type=implication
968
- //# The S3EC SHOULD accept a configurable buffer size which refers to the maximum ciphertext length to store in memory when delayed authentication mode is disabled.
968
+ //# The S3EC SHOULD accept a configurable buffer size which refers to the maximum ciphertext length in bytes to store in memory when Delayed Authentication mode is disabled.
969
969
/**
970
970
* Sets the buffer size for safe authentication used when delayed authentication mode is disabled.
971
971
* If buffer size is not given during client configuration, default buffer size is set to 64MiB.
0 commit comments