Add X-Amz-Server-Side-Encryption-Context header to required signed he…

…aders allowlist (#2228)
aws · Aug 17, 2023 · 18635b8 · 18635b8
1 parent 4682b6a
commit 18635b8
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.changelog/81f52efa843043448ea62016b7471af7.json b/.changelog/81f52efa843043448ea62016b7471af7.json
@@ -0,0 +1,8 @@
+{
+    "id": "81f52efa-8430-4344-8ea6-2016b7471af7",
+    "type": "bugfix",
+    "description": "Sign `X-Amz-Server-Side-Encryption-Context` header to fix signing for PutObject requests that set `SSEKMSEncryptionContext`.",
+    "modules": [
+        "."
+    ]
+}
diff --git a/aws/signer/internal/v4/headers.go b/aws/signer/internal/v4/headers.go
@@ -48,6 +48,7 @@ var RequiredSignedHeaders = Rules{
 			"X-Amz-Request-Payer":                                         struct{}{},
 			"X-Amz-Server-Side-Encryption":                                struct{}{},
 			"X-Amz-Server-Side-Encryption-Aws-Kms-Key-Id":                 struct{}{},
+			"X-Amz-Server-Side-Encryption-Context":                        struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Algorithm":             struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Key":                   struct{}{},
 			"X-Amz-Server-Side-Encryption-Customer-Key-Md5":               struct{}{},