/AWS1/CL_S3_CREATESESSOUTPUT¶
CreateSessionOutput
CONSTRUCTOR
¶
IMPORTING¶
Required arguments:¶
io_credentials
TYPE REF TO /AWS1/CL_S3_SESSIONCREDENTIALS
/AWS1/CL_S3_SESSIONCREDENTIALS
¶
The established temporary security credentials for the created session.
Optional arguments:¶
iv_serversideencryption
TYPE /AWS1/S3_SERVERSIDEENCRYPTION
/AWS1/S3_SERVERSIDEENCRYPTION
¶
The server-side encryption algorithm used when you store objects in the directory bucket.
When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is
aws:fsx
.
iv_ssekmskeyid
TYPE /AWS1/S3_SSEKMSKEYID
/AWS1/S3_SSEKMSKEYID
¶
If you specify
x-amz-server-side-encryption
withaws:kms
, this header indicates the ID of the KMS symmetric encryption customer managed key that was used for object encryption.
iv_ssekmsencryptioncontext
TYPE /AWS1/S3_SSEKMSENCCONTEXT
/AWS1/S3_SSEKMSENCCONTEXT
¶
If present, indicates the Amazon Web Services KMS Encryption Context to use for object encryption. The value of this header is a Base64 encoded string of a UTF-8 encoded JSON, which contains the encryption context as key-value pairs. This value is stored as object metadata and automatically gets passed on to Amazon Web Services KMS for future
GetObject
operations on this object.
iv_bucketkeyenabled
TYPE /AWS1/S3_BUCKETKEYENABLED
/AWS1/S3_BUCKETKEYENABLED
¶
Indicates whether to use an S3 Bucket Key for server-side encryption with KMS keys (SSE-KMS).
Queryable Attributes¶
ServerSideEncryption¶
The server-side encryption algorithm used when you store objects in the directory bucket.
When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is
aws:fsx
.
Accessible with the following methods¶
Method | Description |
---|---|
GET_SERVERSIDEENCRYPTION() |
Getter for SERVERSIDEENCRYPTION, with configurable default |
ASK_SERVERSIDEENCRYPTION() |
Getter for SERVERSIDEENCRYPTION w/ exceptions if field has n |
HAS_SERVERSIDEENCRYPTION() |
Determine if SERVERSIDEENCRYPTION has a value |
SSEKMSKeyId¶
If you specify
x-amz-server-side-encryption
withaws:kms
, this header indicates the ID of the KMS symmetric encryption customer managed key that was used for object encryption.
Accessible with the following methods¶
Method | Description |
---|---|
GET_SSEKMSKEYID() |
Getter for SSEKMSKEYID, with configurable default |
ASK_SSEKMSKEYID() |
Getter for SSEKMSKEYID w/ exceptions if field has no value |
HAS_SSEKMSKEYID() |
Determine if SSEKMSKEYID has a value |
SSEKMSEncryptionContext¶
If present, indicates the Amazon Web Services KMS Encryption Context to use for object encryption. The value of this header is a Base64 encoded string of a UTF-8 encoded JSON, which contains the encryption context as key-value pairs. This value is stored as object metadata and automatically gets passed on to Amazon Web Services KMS for future
GetObject
operations on this object.
Accessible with the following methods¶
Method | Description |
---|---|
GET_SSEKMSENCRYPTIONCONTEXT() |
Getter for SSEKMSENCRYPTIONCONTEXT, with configurable defaul |
ASK_SSEKMSENCRYPTIONCONTEXT() |
Getter for SSEKMSENCRYPTIONCONTEXT w/ exceptions if field ha |
HAS_SSEKMSENCRYPTIONCONTEXT() |
Determine if SSEKMSENCRYPTIONCONTEXT has a value |
BucketKeyEnabled¶
Indicates whether to use an S3 Bucket Key for server-side encryption with KMS keys (SSE-KMS).
Accessible with the following methods¶
Method | Description |
---|---|
GET_BUCKETKEYENABLED() |
Getter for BUCKETKEYENABLED, with configurable default |
ASK_BUCKETKEYENABLED() |
Getter for BUCKETKEYENABLED w/ exceptions if field has no va |
HAS_BUCKETKEYENABLED() |
Determine if BUCKETKEYENABLED has a value |
Credentials¶
The established temporary security credentials for the created session.
Accessible with the following methods¶
Method | Description |
---|---|
GET_CREDENTIALS() |
Getter for CREDENTIALS |