[Cyberduck-trac] [Cyberduck] #9378: Missing x-amz-server-side-encryption header when creating folders

Cyberduck trac at cyberduck.io
Wed Jun 14 09:16:29 UTC 2017


#9378: Missing x-amz-server-side-encryption header when creating folders
--------------------+-------------------------
 Reporter:  jmgtan  |         Owner:  dkocher
     Type:  defect  |        Status:  reopened
 Priority:  normal  |     Milestone:  6.1
Component:  s3      |       Version:  4.8.3
 Severity:  normal  |    Resolution:
 Keywords:          |  Architecture:
 Platform:          |
--------------------+-------------------------

Comment (by dkocher):

 We use the following bucket policy for testing

 {{{
 {
     "Version": "2012-10-17",
     "Statement": [
         {
             "Sid": "DenyIncorrectEncryptionHeader",
             "Effect": "Deny",
             "Principal": "*",
             "Action": "s3:PutObject",
             "Resource": "arn:aws:s3:::test-eu-central-1-sse/*",
             "Condition": {
                 "StringNotEquals": {
                     "s3:x-amz-server-side-encryption": "AES256"
                 }
             }
         },
         {
             "Sid": "DenyUnEncryptedObjectUploads",
             "Effect": "Deny",
             "Principal": "*",
             "Action": "s3:PutObject",
             "Resource": "arn:aws:s3:::test-eu-central-1-sse/*",
             "Condition": {
                 "Null": {
                     "s3:x-amz-server-side-encryption": "true"
                 }
             }
         }
     ]
 }
 }}}

--
Ticket URL: <https://trac.cyberduck.io/ticket/9378#comment:7>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list