Merge pull request #4949 from fenak/fix-encryption-context-header-in-…

…presigned-urls
aws · Aug 17, 2023 · 4edac13 · 4edac13
2 parents cf2803a + d7de4bb
commit 4edac13
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
@@ -3,3 +3,5 @@
 ### SDK Enhancements
 
 ### SDK Bugs
+* `aws/signer/v4`: Sign `X-Amz-Server-Side-Encryption-Context` header.
+  * Fixes signing for PutObject requests that set `SSEKMSEncryptionContext`.
diff --git a/aws/signer/v4/v4.go b/aws/signer/v4/v4.go
@@ -135,6 +135,7 @@ var requiredSignedHeaders = rules{
 			"X-Amz-Request-Payer":                                         struct{}{},
 			"X-Amz-Server-Side-Encryption":                                struct{}{},
 			"X-Amz-Server-Side-Encryption-Aws-Kms-Key-Id":                 struct{}{},
+			"X-Amz-Server-Side-Encryption-Context":                        struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Algorithm":             struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Key":                   struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Key-Md5":               struct{}{},