Allowlist bucket owner header (#2358)

aws · Nov 8, 2023 · efa5486 · efa5486
1 parent 5118d3b
commit efa5486
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.changelog/b772315fdda94ce895c4cae2bbef10ce.json b/.changelog/b772315fdda94ce895c4cae2bbef10ce.json
@@ -0,0 +1,8 @@
+{
+    "id": "b772315f-dda9-4ce8-95c4-cae2bbef10ce",
+    "type": "bugfix",
+    "description": "added x-amz-expected-bucket-owner to the list of headers we should sign",
+    "modules": [
+        "."
+    ]
+}
diff --git a/aws/signer/internal/v4/headers.go b/aws/signer/internal/v4/headers.go
@@ -38,6 +38,7 @@ var RequiredSignedHeaders = Rules{
 			"X-Amz-Copy-Source-Server-Side-Encryption-Customer-Algorithm": struct{}{},
 			"X-Amz-Copy-Source-Server-Side-Encryption-Customer-Key":       struct{}{},
 			"X-Amz-Copy-Source-Server-Side-Encryption-Customer-Key-Md5":   struct{}{},
+			"X-Amz-Expected-Bucket-Owner":                                 struct{}{},
 			"X-Amz-Grant-Full-control":                                    struct{}{},
 			"X-Amz-Grant-Read":                                            struct{}{},
 			"X-Amz-Grant-Read-Acp":                                        struct{}{},