adoroszlai commented on code in PR #11788:
URL: https://github.com/apache/ozone/pull/11788#discussion_r4385279349
##########
hadoop-hdds/docs/content/interface/S3.md:
##########
@@ -116,6 +116,9 @@ The Ozone S3 Gateway implements a substantial subset of the
Amazon S3 REST API.
> - **Lifecycle configuration, cross region replication, S3 event
> notifications** are being implemented and in the roadmap.
> - While Ozone S3 Gateway provides extensive support for common S3
> operations, users should be aware of the above non-compliant behaviors and
> limitations when integrating with applications expecting full AWS S3
> functionality.
> - While Ozone S3 Gateway does not support S3 Server-Side Encryption, it does
> support encrypted buckets using Apache Ranger KMS. For more information, see
> the [Transparent Data Encryption]({{< relref "security/SecuringTDE.md" >}})
> documentation.
+> A request for server-side encryption is never ignored:
+> - SSE-S3 and SSE-KMS (`x-amz-server-side-encryption: AES256` or `aws:kms`)
are accepted only in encrypted buckets, whose data is encrypted with the
bucket's key. With `aws:kms`, a key id must be the bucket's encryption key, and
the response returns it. In other buckets, the request fails with
`NotImplemented`.
+> - SSE-C (`x-amz-server-side-encryption-customer-*` and
`x-amz-copy-source-server-side-encryption-customer-*`), an encryption context
and `aws:kms:dsse` are not supported in any bucket, and fail with
`NotImplemented`.
Review Comment:
Thanks for the patch. Please add documentation in
[ozone-site](https://github.com/apache/ozone-site/). Leftover docs are being
removed from this repo in #10829.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
