Skip to content

/AWS1/CL_S3_CREATESESSOUTPUT

CreateSessionOutput

CONSTRUCTOR

IMPORTING

Required arguments:

io_credentials TYPE REF TO /AWS1/CL_S3_SESSIONCREDENTIALS /AWS1/CL_S3_SESSIONCREDENTIALS

The established temporary security credentials for the created session.

Optional arguments:

iv_serversideencryption TYPE /AWS1/S3_SERVERSIDEENCRYPTION /AWS1/S3_SERVERSIDEENCRYPTION

The server-side encryption algorithm used when you store objects in the directory bucket.

When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is aws:fsx.

iv_ssekmskeyid TYPE /AWS1/S3_SSEKMSKEYID /AWS1/S3_SSEKMSKEYID

If you specify x-amz-server-side-encryption with aws:kms, this header indicates the ID of the KMS symmetric encryption customer managed key that was used for object encryption.

iv_ssekmsencryptioncontext TYPE /AWS1/S3_SSEKMSENCCONTEXT /AWS1/S3_SSEKMSENCCONTEXT

If present, indicates the Amazon Web Services KMS Encryption Context to use for object encryption. The value of this header is a Base64 encoded string of a UTF-8 encoded JSON, which contains the encryption context as key-value pairs. This value is stored as object metadata and automatically gets passed on to Amazon Web Services KMS for future GetObject operations on this object.

iv_bucketkeyenabled TYPE /AWS1/S3_BUCKETKEYENABLED /AWS1/S3_BUCKETKEYENABLED

Indicates whether to use an S3 Bucket Key for server-side encryption with KMS keys (SSE-KMS).


Queryable Attributes

ServerSideEncryption

The server-side encryption algorithm used when you store objects in the directory bucket.

When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is aws:fsx.

Accessible with the following methods

Method Description
GET_SERVERSIDEENCRYPTION() Getter for SERVERSIDEENCRYPTION, with configurable default
ASK_SERVERSIDEENCRYPTION() Getter for SERVERSIDEENCRYPTION w/ exceptions if field has n
HAS_SERVERSIDEENCRYPTION() Determine if SERVERSIDEENCRYPTION has a value

SSEKMSKeyId

If you specify x-amz-server-side-encryption with aws:kms, this header indicates the ID of the KMS symmetric encryption customer managed key that was used for object encryption.

Accessible with the following methods

Method Description
GET_SSEKMSKEYID() Getter for SSEKMSKEYID, with configurable default
ASK_SSEKMSKEYID() Getter for SSEKMSKEYID w/ exceptions if field has no value
HAS_SSEKMSKEYID() Determine if SSEKMSKEYID has a value

SSEKMSEncryptionContext

If present, indicates the Amazon Web Services KMS Encryption Context to use for object encryption. The value of this header is a Base64 encoded string of a UTF-8 encoded JSON, which contains the encryption context as key-value pairs. This value is stored as object metadata and automatically gets passed on to Amazon Web Services KMS for future GetObject operations on this object.

Accessible with the following methods

Method Description
GET_SSEKMSENCRYPTIONCONTEXT() Getter for SSEKMSENCRYPTIONCONTEXT, with configurable defaul
ASK_SSEKMSENCRYPTIONCONTEXT() Getter for SSEKMSENCRYPTIONCONTEXT w/ exceptions if field ha
HAS_SSEKMSENCRYPTIONCONTEXT() Determine if SSEKMSENCRYPTIONCONTEXT has a value

BucketKeyEnabled

Indicates whether to use an S3 Bucket Key for server-side encryption with KMS keys (SSE-KMS).

Accessible with the following methods

Method Description
GET_BUCKETKEYENABLED() Getter for BUCKETKEYENABLED, with configurable default
ASK_BUCKETKEYENABLED() Getter for BUCKETKEYENABLED w/ exceptions if field has no va
HAS_BUCKETKEYENABLED() Determine if BUCKETKEYENABLED has a value

Credentials

The established temporary security credentials for the created session.

Accessible with the following methods

Method Description
GET_CREDENTIALS() Getter for CREDENTIALS