From b474584f2cfb0438fb1007d0594a54cf1a1c2dcb Mon Sep 17 00:00:00 2001
From: awstools <awstools@amazon.com>
Date: Tue, 20 Aug 2024 18:26:44 +0000
Subject: [PATCH] feat(client-s3): Amazon Simple Storage Service / Features :
 Add support for conditional writes for PutObject and CompleteMultipartUpload
 APIs.

---
 .../CompleteMultipartUploadCommand.ts         | 15 +++++--
 .../commands/CreateMultipartUploadCommand.ts  | 25 ++++++-----
 .../src/commands/PutObjectCommand.ts          |  1 +
 .../src/commands/RestoreObjectCommand.ts      |  4 ++
 .../commands/SelectObjectContentCommand.ts    |  4 ++
 .../src/commands/UploadPartCommand.ts         | 18 ++++++--
 .../src/commands/UploadPartCopyCommand.ts     | 39 ++++++++++++++----
 clients/client-s3/src/models/models_0.ts      | 20 +++++++--
 clients/client-s3/src/models/models_1.ts      | 41 ++++++++++++++++---
 .../client-s3/src/protocols/Aws_restXml.ts    |  2 +
 codegen/sdk-codegen/aws-models/s3.json        | 40 ++++++++++++------
 11 files changed, 162 insertions(+), 47 deletions(-)

diff --git a/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts b/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
index dd12554f6656..21aea076fb09 100644
--- a/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
+++ b/clients/client-s3/src/commands/CompleteMultipartUploadCommand.ts
@@ -81,9 +81,10 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
  *                <ul>
  *                   <li>
  *                      <p>
- *                         <b>General purpose bucket permissions</b> - For information about permissions required to use the multipart upload API, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart Upload
- *                         and Permissions</a> in the <i>Amazon S3
- *                            User Guide</i>.</p>
+ *                         <b>General purpose bucket permissions</b> - For
+ *                         information about permissions required to use the multipart upload API, see
+ *                            <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart Upload and
+ *                            Permissions</a> in the <i>Amazon S3 User Guide</i>.</p>
  *                   </li>
  *                   <li>
  *                      <p>
@@ -94,6 +95,13 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
  *                            <code>CreateSession</code>
  *                         </a>.</p>
  *                   </li>
+ *                   <li>
+ *                      <p> If you provide an <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html">additional checksum
+ *                            value</a> in your <code>MultipartUpload</code> requests and the
+ *                         object is encrypted with Key Management Service, you must have permission to use the
+ *                            <code>kms:Decrypt</code> action for the
+ *                            <code>CompleteMultipartUpload</code> request to succeed.</p>
+ *                   </li>
  *                </ul>
  *             </dd>
  *             <dt>Special errors</dt>
@@ -218,6 +226,7 @@ export interface CompleteMultipartUploadCommandOutput extends CompleteMultipartU
  *   ChecksumSHA256: "STRING_VALUE",
  *   RequestPayer: "requester",
  *   ExpectedBucketOwner: "STRING_VALUE",
+ *   IfNoneMatch: "STRING_VALUE",
  *   SSECustomerAlgorithm: "STRING_VALUE",
  *   SSECustomerKey: "STRING_VALUE",
  *   SSECustomerKeyMD5: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts b/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
index 0f5f426ddf7a..26173ef13dbf 100644
--- a/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
+++ b/clients/client-s3/src/commands/CreateMultipartUploadCommand.ts
@@ -78,17 +78,20 @@ export interface CreateMultipartUploadCommandOutput extends CreateMultipartUploa
  *                <ul>
  *                   <li>
  *                      <p>
- *                         <b>General purpose bucket permissions</b> - For information about the permissions required to use the multipart upload API, see
- *                         <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart
- *                            upload and permissions</a> in the <i>Amazon S3 User Guide</i>. </p>
- *                      <p>To perform a multipart upload with encryption by using an Amazon Web Services KMS key, the requester
- *                         must have permission to the <code>kms:Decrypt</code> and <code>kms:GenerateDataKey*</code>
- *                         actions on the key. These permissions are required because Amazon S3 must decrypt and read data
- *                         from the encrypted file parts before it completes the multipart upload. For more
- *                         information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API
- *                            and permissions</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html">Protecting data using
- *                               server-side encryption with Amazon Web Services KMS</a> in the
- *                         <i>Amazon S3 User Guide</i>.</p>
+ *                         <b>General purpose bucket permissions</b> - To
+ *                         perform a multipart upload with encryption using an Key Management Service (KMS)
+ *                         KMS key, the requester must have permission to the
+ *                            <code>kms:Decrypt</code> and <code>kms:GenerateDataKey</code> actions on
+ *                         the key. The requester must also have permissions for the
+ *                            <code>kms:GenerateDataKey</code> action for the
+ *                            <code>CreateMultipartUpload</code> API. Then, the requester needs
+ *                         permissions for the <code>kms:Decrypt</code> action on the
+ *                            <code>UploadPart</code> and <code>UploadPartCopy</code> APIs. These
+ *                         permissions are required because Amazon S3 must decrypt and read data from the
+ *                         encrypted file parts before it completes the multipart upload. For more
+ *                         information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API and permissions</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html">Protecting data
+ *                            using server-side encryption with Amazon Web Services KMS</a> in the
+ *                            <i>Amazon S3 User Guide</i>.</p>
  *                   </li>
  *                   <li>
  *                      <p>
diff --git a/clients/client-s3/src/commands/PutObjectCommand.ts b/clients/client-s3/src/commands/PutObjectCommand.ts
index bf0d5153681c..17dede643bee 100644
--- a/clients/client-s3/src/commands/PutObjectCommand.ts
+++ b/clients/client-s3/src/commands/PutObjectCommand.ts
@@ -190,6 +190,7 @@ export interface PutObjectCommandOutput extends PutObjectOutput, __MetadataBeare
  *   ChecksumSHA1: "STRING_VALUE",
  *   ChecksumSHA256: "STRING_VALUE",
  *   Expires: new Date("TIMESTAMP"),
+ *   IfNoneMatch: "STRING_VALUE",
  *   GrantFullControl: "STRING_VALUE",
  *   GrantRead: "STRING_VALUE",
  *   GrantReadACP: "STRING_VALUE",
diff --git a/clients/client-s3/src/commands/RestoreObjectCommand.ts b/clients/client-s3/src/commands/RestoreObjectCommand.ts
index 950162dc6523..63ceea6b442c 100644
--- a/clients/client-s3/src/commands/RestoreObjectCommand.ts
+++ b/clients/client-s3/src/commands/RestoreObjectCommand.ts
@@ -33,6 +33,10 @@ export interface RestoreObjectCommandOutput extends RestoreObjectOutput, __Metad
  * <note>
  *             <p>This operation is not supported by directory buckets.</p>
  *          </note>
+ *          <important>
+ *             <p>The <code>SELECT</code> job type for the RestoreObject operation is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+ *             </p>
+ *          </important>
  *          <p>Restores an archived copy of an object back into Amazon S3</p>
  *          <p>This functionality is not supported for Amazon S3 on Outposts.</p>
  *          <p>This action performs the following types of requests: </p>
diff --git a/clients/client-s3/src/commands/SelectObjectContentCommand.ts b/clients/client-s3/src/commands/SelectObjectContentCommand.ts
index 4f3f738fb48f..95787c6cde3d 100644
--- a/clients/client-s3/src/commands/SelectObjectContentCommand.ts
+++ b/clients/client-s3/src/commands/SelectObjectContentCommand.ts
@@ -38,6 +38,10 @@ export interface SelectObjectContentCommandOutput extends SelectObjectContentOut
  * <note>
  *             <p>This operation is not supported by directory buckets.</p>
  *          </note>
+ *          <important>
+ *             <p>The SelectObjectContent operation is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the operation as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+ *             </p>
+ *          </important>
  *          <p>This action filters the contents of an Amazon S3 object based on a simple structured query
  *          language (SQL) statement. In the request, along with the SQL expression, you must also
  *          specify a data serialization format (JSON, CSV, or Apache Parquet) of the object. Amazon S3 uses
diff --git a/clients/client-s3/src/commands/UploadPartCommand.ts b/clients/client-s3/src/commands/UploadPartCommand.ts
index 3e76903ec47f..18c49d3f800c 100644
--- a/clients/client-s3/src/commands/UploadPartCommand.ts
+++ b/clients/client-s3/src/commands/UploadPartCommand.ts
@@ -76,9 +76,21 @@ export interface UploadPartCommandOutput extends UploadPartOutput, __MetadataBea
  *                <ul>
  *                   <li>
  *                      <p>
- *                         <b>General purpose bucket permissions</b> - For information on the permissions required to use the multipart upload API, see
- *                         <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart
- *                            Upload and Permissions</a> in the <i>Amazon S3 User Guide</i>.</p>
+ *                         <b>General purpose bucket permissions</b> - To
+ *                         perform a multipart upload with encryption using an Key Management Service key, the
+ *                         requester must have permission to the <code>kms:Decrypt</code> and
+ *                            <code>kms:GenerateDataKey</code> actions on the key. The requester must
+ *                         also have permissions for the <code>kms:GenerateDataKey</code> action for
+ *                         the <code>CreateMultipartUpload</code> API. Then, the requester needs
+ *                         permissions for the <code>kms:Decrypt</code> action on the
+ *                            <code>UploadPart</code> and <code>UploadPartCopy</code> APIs.</p>
+ *                      <p>These permissions are required because Amazon S3 must decrypt and read data
+ *                         from the encrypted file parts before it completes the multipart upload. For
+ *                         more information about KMS permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html">Protecting data
+ *                            using server-side encryption with KMS</a> in the
+ *                            <i>Amazon S3 User Guide</i>. For information about the
+ *                         permissions required to use the multipart upload API, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart upload and permissions</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API and permissions</a> in the
+ *                            <i>Amazon S3 User Guide</i>.</p>
  *                   </li>
  *                   <li>
  *                      <p>
diff --git a/clients/client-s3/src/commands/UploadPartCopyCommand.ts b/clients/client-s3/src/commands/UploadPartCopyCommand.ts
index 14ac6817dd43..54ed1745004b 100644
--- a/clients/client-s3/src/commands/UploadPartCopyCommand.ts
+++ b/clients/client-s3/src/commands/UploadPartCopyCommand.ts
@@ -76,23 +76,44 @@ export interface UploadPartCopyCommandOutput extends UploadPartCopyOutput, __Met
  *                <ul>
  *                   <li>
  *                      <p>
- *                         <b>General purpose bucket permissions</b> - You must have the permissions in a policy based on the bucket types of your source bucket and destination bucket in an <code>UploadPartCopy</code> operation.</p>
+ *                         <b>General purpose bucket permissions</b> - You
+ *                         must have the permissions in a policy based on the bucket types of your
+ *                         source bucket and destination bucket in an <code>UploadPartCopy</code>
+ *                         operation.</p>
  *                      <ul>
  *                         <li>
- *                            <p>If the source object is in a general purpose bucket, you must have the <b>
+ *                            <p>If the source object is in a general purpose bucket, you must have the
+ *                                  <b>
  *                                  <code>s3:GetObject</code>
- *                               </b> permission to read the source object that is being copied. </p>
+ *                               </b>
+ *                               permission to read the source object that is being copied. </p>
  *                         </li>
  *                         <li>
- *                            <p>If the destination bucket is a general purpose bucket, you must have the <b>
+ *                            <p>If the destination bucket is a general purpose bucket, you must have the
+ *                                  <b>
  *                                  <code>s3:PutObject</code>
- *                               </b> permission to write the object copy to the destination bucket.
- *                            </p>
+ *                               </b>
+ *                               permission to write the object copy to the destination bucket. </p>
+ *                         </li>
+ *                         <li>
+ *                            <p>To perform a multipart upload with encryption using an Key Management Service
+ *                               key, the requester must have permission to the
+ *                                  <code>kms:Decrypt</code> and <code>kms:GenerateDataKey</code>
+ *                               actions on the key. The requester must also have permissions for the
+ *                                  <code>kms:GenerateDataKey</code> action for the
+ *                                  <code>CreateMultipartUpload</code> API. Then, the requester needs
+ *                               permissions for the <code>kms:Decrypt</code> action on the
+ *                                  <code>UploadPart</code> and <code>UploadPartCopy</code> APIs. These
+ *                               permissions are required because Amazon S3 must decrypt and read data from
+ *                               the encrypted file parts before it completes the multipart upload. For
+ *                               more information about KMS permissions, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html">Protecting
+ *                                  data using server-side encryption with KMS</a> in the
+ *                                  <i>Amazon S3 User Guide</i>. For information about the
+ *                               permissions required to use the multipart upload API, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html">Multipart upload
+ *                                  and permissions</a> and <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API and permissions</a> in the
+ *                                  <i>Amazon S3 User Guide</i>.</p>
  *                         </li>
  *                      </ul>
- *                      <p>For information about permissions required to use the multipart upload API, see
- *                         <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions">Multipart upload API and permissions</a> in the
- *                         <i>Amazon S3 User Guide</i>.</p>
  *                   </li>
  *                   <li>
  *                      <p>
diff --git a/clients/client-s3/src/models/models_0.ts b/clients/client-s3/src/models/models_0.ts
index d4fc5558251b..a62fb4947cf0 100644
--- a/clients/client-s3/src/models/models_0.ts
+++ b/clients/client-s3/src/models/models_0.ts
@@ -714,6 +714,15 @@ export interface CompleteMultipartUploadRequest {
    */
   ExpectedBucketOwner?: string;
 
+  /**
+   * <p>Uploads the object only if the object key name does not already exist in the bucket specified. Otherwise, Amazon S3 returns a <code>412 Precondition Failed</code> error.</p>
+   *          <p>If a conflicting operation occurs during the upload S3 returns a <code>409 ConditionalRequestConflict</code> response.  On a 409 failure you should re-initiate the multipart upload with <code>CreateMultipartUpload</code> and re-upload each part.</p>
+   *          <p>Expects the '*' (asterisk) character.</p>
+   *          <p>For more information about conditional requests, see <a href="https://tools.ietf.org/html/rfc7232">RFC 7232</a>, or <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-requests.html">Conditional requests</a> in the <i>Amazon S3 User Guide</i>.</p>
+   * @public
+   */
+  IfNoneMatch?: string;
+
   /**
    * <p>The server-side encryption (SSE) algorithm used to encrypt the object. This parameter is
    *          required only when the object was created using a checksum algorithm or if
@@ -9513,6 +9522,10 @@ export interface GetObjectRequest {
 
   /**
    * <p>To retrieve the checksum, this mode must be enabled.</p>
+   *          <p>In addition, if you enable checksum mode and the object is uploaded with a
+   *          <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html">checksum</a>
+   *          and encrypted with an Key Management Service (KMS) key, you must have permission to use the
+   *          <code>kms:Decrypt</code> action to retrieve the checksum.</p>
    * @public
    */
   ChecksumMode?: ChecksumMode;
@@ -11236,9 +11249,10 @@ export interface HeadObjectRequest {
 
   /**
    * <p>To retrieve the checksum, this parameter must be enabled.</p>
-   *          <p>In addition, if you enable <code>ChecksumMode</code> and the object is encrypted with
-   *          Amazon Web Services Key Management Service (Amazon Web Services KMS), you must have permission to use the
-   *             <code>kms:Decrypt</code> action for the request to succeed.</p>
+   *          <p>In addition, if you enable checksum mode and the object is uploaded with a
+   *          <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html">checksum</a>
+   *          and encrypted with an Key Management Service (KMS) key, you must have permission to use the
+   *          <code>kms:Decrypt</code> action to retrieve the checksum.</p>
    * @public
    */
   ChecksumMode?: ChecksumMode;
diff --git a/clients/client-s3/src/models/models_1.ts b/clients/client-s3/src/models/models_1.ts
index 534f2476f57b..8f109ef0b508 100644
--- a/clients/client-s3/src/models/models_1.ts
+++ b/clients/client-s3/src/models/models_1.ts
@@ -824,6 +824,15 @@ export interface PutObjectRequest {
    */
   Expires?: Date;
 
+  /**
+   * <p>Uploads the object only if the object key name does not already exist in the bucket specified. Otherwise, Amazon S3 returns a <code>412 Precondition Failed</code> error.</p>
+   *          <p>If a conflicting operation occurs during the upload S3 returns a <code>409 ConditionalRequestConflict</code> response. On a 409 failure you should retry the upload.</p>
+   *          <p>Expects the '*' (asterisk) character.</p>
+   *          <p>For more information about conditional requests, see <a href="https://tools.ietf.org/html/rfc7232">RFC 7232</a>, or <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-requests.html">Conditional requests</a> in the <i>Amazon S3 User Guide</i>.</p>
+   * @public
+   */
+  IfNoneMatch?: string;
+
   /**
    * <p>Gives the grantee READ, READ_ACP, and WRITE_ACP permissions on the object.</p>
    *          <note>
@@ -2106,7 +2115,13 @@ export interface OutputSerialization {
 }
 
 /**
- * <p>Describes the parameters for Select job types.</p>
+ * <important>
+ *             <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+ *             </p>
+ *          </important>
+ *          <p>Describes the parameters for Select job types.</p>
+ *          <p>Learn <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">How to optimize querying your data in Amazon S3</a>  using
+ *          <a href="https://docs.aws.amazon.com/athena/latest/ug/what-is.html">Amazon Athena</a>, <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/transforming-objects.html">S3 Object Lambda</a>, or client-side filtering.</p>
  * @public
  */
 export interface SelectParameters {
@@ -2123,7 +2138,11 @@ export interface SelectParameters {
   ExpressionType: ExpressionType | undefined;
 
   /**
-   * <p>The expression that is used to query the object.</p>
+   * <important>
+   *             <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+   *             </p>
+   *          </important>
+   *          <p>The expression that is used to query the object.</p>
    * @public
    */
   Expression: string | undefined;
@@ -2170,7 +2189,11 @@ export interface RestoreRequest {
   GlacierJobParameters?: GlacierJobParameters;
 
   /**
-   * <p>Type of restore request.</p>
+   * <important>
+   *             <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+   *             </p>
+   *          </important>
+   *          <p>Type of restore request.</p>
    * @public
    */
   Type?: RestoreRequestType;
@@ -2188,7 +2211,11 @@ export interface RestoreRequest {
   Description?: string;
 
   /**
-   * <p>Describes the parameters for Select job types.</p>
+   * <important>
+   *             <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+   *             </p>
+   *          </important>
+   *          <p>Describes the parameters for Select job types.</p>
    * @public
    */
   SelectParameters?: SelectParameters;
@@ -2539,7 +2566,11 @@ export interface ScanRange {
 }
 
 /**
- * <p>Request to filter the contents of an Amazon S3 object based on a simple Structured Query
+ * <note>
+ *             <p>Learn Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href="http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/">Learn more</a>
+ *             </p>
+ *          </note>
+ *          <p>Request to filter the contents of an Amazon S3 object based on a simple Structured Query
  *          Language (SQL) statement. In the request, along with the SQL expression, you must specify a
  *          data serialization format (JSON or CSV) of the object. Amazon S3 uses this to parse object data
  *          into records. It returns only records that match the specified SQL expression. You must
diff --git a/clients/client-s3/src/protocols/Aws_restXml.ts b/clients/client-s3/src/protocols/Aws_restXml.ts
index 31e26dee1471..582989c7537d 100644
--- a/clients/client-s3/src/protocols/Aws_restXml.ts
+++ b/clients/client-s3/src/protocols/Aws_restXml.ts
@@ -485,6 +485,7 @@ export const se_CompleteMultipartUploadCommand = async (
     [_xacs_]: input[_CSHAh]!,
     [_xarp]: input[_RP]!,
     [_xaebo]: input[_EBO]!,
+    [_inm]: input[_INM]!,
     [_xasseca]: input[_SSECA]!,
     [_xasseck]: input[_SSECK]!,
     [_xasseckm]: input[_SSECKMD]!,
@@ -2634,6 +2635,7 @@ export const se_PutObjectCommand = async (
     [_xacs]: input[_CSHA]!,
     [_xacs_]: input[_CSHAh]!,
     [_e]: [() => isSerializableHeaderValue(input[_E]), () => __dateToUtcString(input[_E]!).toString()],
+    [_inm]: input[_INM]!,
     [_xagfc]: input[_GFC]!,
     [_xagr]: input[_GR]!,
     [_xagra]: input[_GRACP]!,
diff --git a/codegen/sdk-codegen/aws-models/s3.json b/codegen/sdk-codegen/aws-models/s3.json
index 5bec54e76ad7..d359f959b9e1 100644
--- a/codegen/sdk-codegen/aws-models/s3.json
+++ b/codegen/sdk-codegen/aws-models/s3.json
@@ -18284,7 +18284,7 @@
         "target": "com.amazonaws.s3#CompleteMultipartUploadOutput"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Completes a multipart upload by assembling previously uploaded parts.</p>\n         <p>You first initiate the multipart upload and then upload all parts using the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n         operation or the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a>\n         operation. After successfully uploading all relevant parts of an upload, you call this\n         <code>CompleteMultipartUpload</code> operation to complete the upload. Upon receiving this request, Amazon S3 concatenates all the parts\n         in ascending order by part number to create a new object. In the CompleteMultipartUpload \n         request, you must provide the parts list and ensure that the parts list is complete.\n         The CompleteMultipartUpload API operation concatenates the parts that you provide in the list. For each part in the list,\n         you must provide the <code>PartNumber</code> value and the <code>ETag</code> value that are returned after that part\n         was uploaded.</p>\n         <p>The processing of a CompleteMultipartUpload request could take several minutes to\n         finalize. After Amazon S3 begins processing the request, it sends an HTTP response header that\n         specifies a <code>200 OK</code> response. While processing is in progress, Amazon S3 periodically sends white\n         space characters to keep the connection from timing out. A request could fail after the\n         initial <code>200 OK</code> response has been sent. This means that a <code>200 OK</code> response can\n         contain either a success or an error. The error response might be embedded in the <code>200 OK</code> response. \n         If you call this API operation directly, make sure to design\n         your application to parse the contents of the response and handle it appropriately. If you\n         use Amazon Web Services SDKs, SDKs handle this condition. The SDKs detect the embedded error and apply\n         error handling per your configuration settings (including automatically retrying the\n         request as appropriate). If the condition persists, the SDKs throw an exception (or, for\n         the SDKs that don't use exceptions, they return an error). </p>\n         <p>Note that if <code>CompleteMultipartUpload</code> fails, applications should be prepared\n         to retry any failed requests (including 500 error responses). For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ErrorBestPractices.html\">Amazon S3 Error Best\n         Practices</a>.</p>\n         <important>\n            <p>You can't use <code>Content-Type: application/x-www-form-urlencoded</code> for the \n            CompleteMultipartUpload requests. Also, if you don't provide a\n               <code>Content-Type</code> header, <code>CompleteMultipartUpload</code> can still return a <code>200\n            OK</code> response.</p>\n         </important>\n         <p>For more information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/uploadobjusingmpu.html\">Uploading Objects Using Multipart\n         Upload</a> in the <i>Amazon S3\n            User Guide</i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> -  For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - For information about permissions required to use the multipart upload API, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart Upload\n                        and Permissions</a> in the <i>Amazon S3\n                           User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>EntityTooSmall</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: Your proposed upload is smaller than the minimum allowed object\n                           size. Each part must be at least 5 MB in size, except the last part.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidPart</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: One or more of the specified parts could not be found. The part\n                           might not have been uploaded, or the specified ETag might not have\n                           matched the uploaded part's ETag.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidPartOrder</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The list of parts was not in ascending order. The parts list\n                           must be specified in order by part number.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The upload ID\n                           might be invalid, or the multipart upload might have been aborted or\n                           completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>CompleteMultipartUpload</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<p>Completes a multipart upload by assembling previously uploaded parts.</p>\n         <p>You first initiate the multipart upload and then upload all parts using the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n         operation or the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a>\n         operation. After successfully uploading all relevant parts of an upload, you call this\n         <code>CompleteMultipartUpload</code> operation to complete the upload. Upon receiving this request, Amazon S3 concatenates all the parts\n         in ascending order by part number to create a new object. In the CompleteMultipartUpload \n         request, you must provide the parts list and ensure that the parts list is complete.\n         The CompleteMultipartUpload API operation concatenates the parts that you provide in the list. For each part in the list,\n         you must provide the <code>PartNumber</code> value and the <code>ETag</code> value that are returned after that part\n         was uploaded.</p>\n         <p>The processing of a CompleteMultipartUpload request could take several minutes to\n         finalize. After Amazon S3 begins processing the request, it sends an HTTP response header that\n         specifies a <code>200 OK</code> response. While processing is in progress, Amazon S3 periodically sends white\n         space characters to keep the connection from timing out. A request could fail after the\n         initial <code>200 OK</code> response has been sent. This means that a <code>200 OK</code> response can\n         contain either a success or an error. The error response might be embedded in the <code>200 OK</code> response. \n         If you call this API operation directly, make sure to design\n         your application to parse the contents of the response and handle it appropriately. If you\n         use Amazon Web Services SDKs, SDKs handle this condition. The SDKs detect the embedded error and apply\n         error handling per your configuration settings (including automatically retrying the\n         request as appropriate). If the condition persists, the SDKs throw an exception (or, for\n         the SDKs that don't use exceptions, they return an error). </p>\n         <p>Note that if <code>CompleteMultipartUpload</code> fails, applications should be prepared\n         to retry any failed requests (including 500 error responses). For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ErrorBestPractices.html\">Amazon S3 Error Best\n         Practices</a>.</p>\n         <important>\n            <p>You can't use <code>Content-Type: application/x-www-form-urlencoded</code> for the \n            CompleteMultipartUpload requests. Also, if you don't provide a\n               <code>Content-Type</code> header, <code>CompleteMultipartUpload</code> can still return a <code>200\n            OK</code> response.</p>\n         </important>\n         <p>For more information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/uploadobjusingmpu.html\">Uploading Objects Using Multipart\n         Upload</a> in the <i>Amazon S3\n            User Guide</i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> -  For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - For\n                        information about permissions required to use the multipart upload API, see\n                           <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart Upload and\n                           Permissions</a> in the <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n                  <li>\n                     <p> If you provide an <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html\">additional checksum\n                           value</a> in your <code>MultipartUpload</code> requests and the\n                        object is encrypted with Key Management Service, you must have permission to use the\n                           <code>kms:Decrypt</code> action for the\n                           <code>CompleteMultipartUpload</code> request to succeed.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>EntityTooSmall</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: Your proposed upload is smaller than the minimum allowed object\n                           size. Each part must be at least 5 MB in size, except the last part.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidPart</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: One or more of the specified parts could not be found. The part\n                           might not have been uploaded, or the specified ETag might not have\n                           matched the uploaded part's ETag.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidPartOrder</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The list of parts was not in ascending order. The parts list\n                           must be specified in order by part number.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The upload ID\n                           might be invalid, or the multipart upload might have been aborted or\n                           completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>CompleteMultipartUpload</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#http": {
           "method": "POST",
           "uri": "/{Bucket}/{Key+}",
@@ -18472,6 +18472,13 @@
             "smithy.api#httpHeader": "x-amz-expected-bucket-owner"
           }
         },
+        "IfNoneMatch": {
+          "target": "com.amazonaws.s3#IfNoneMatch",
+          "traits": {
+            "smithy.api#documentation": "<p>Uploads the object only if the object key name does not already exist in the bucket specified. Otherwise, Amazon S3 returns a <code>412 Precondition Failed</code> error.</p>\n         <p>If a conflicting operation occurs during the upload S3 returns a <code>409 ConditionalRequestConflict</code> response.  On a 409 failure you should re-initiate the multipart upload with <code>CreateMultipartUpload</code> and re-upload each part.</p>\n         <p>Expects the '*' (asterisk) character.</p>\n         <p>For more information about conditional requests, see <a href=\"https://tools.ietf.org/html/rfc7232\">RFC 7232</a>, or <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-requests.html\">Conditional requests</a> in the <i>Amazon S3 User Guide</i>.</p>",
+            "smithy.api#httpHeader": "If-None-Match"
+          }
+        },
         "SSECustomerAlgorithm": {
           "target": "com.amazonaws.s3#SSECustomerAlgorithm",
           "traits": {
@@ -19386,7 +19393,7 @@
         "target": "com.amazonaws.s3#CreateMultipartUploadOutput"
       },
       "traits": {
-        "smithy.api#documentation": "<p>This action initiates a multipart upload and returns an upload ID. This upload ID is\n         used to associate all of the parts in the specific multipart upload. You specify this\n         upload ID in each of your subsequent upload part requests (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>). You also include this\n         upload ID in the final request to either complete or abort the multipart upload\n         request. For more information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html\">Multipart Upload Overview</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>After you initiate a multipart upload and upload one or more parts, to stop being\n            charged for storing the uploaded parts, you must either complete or abort the multipart\n            upload. Amazon S3 frees up the space used to store the parts and stops charging you for\n            storing them only after you either complete or abort a multipart upload. </p>\n         </note>\n         <p>If you have configured a lifecycle rule to abort incomplete multipart uploads, the created multipart  \n         upload must be completed within the number of days specified in the bucket lifecycle\n         configuration. Otherwise, the incomplete multipart upload becomes eligible for an abort\n         action and Amazon S3 aborts the multipart upload. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config\">Aborting Incomplete Multipart Uploads Using a Bucket Lifecycle\n            Configuration</a>.</p>\n         <note>\n            <ul>\n               <li>\n                  <p>\n                     <b>Directory buckets </b> - S3 Lifecycle is not supported by directory buckets.</p>\n               </li>\n               <li>\n                  <p>\n                     <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n                     </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n               </li>\n            </ul>\n         </note>\n         <dl>\n            <dt>Request signing</dt>\n            <dd>\n               <p>For request signing, multipart upload is just a series of regular requests. You initiate\n               a multipart upload, send one or more requests to upload parts, and then complete the\n               multipart upload process. You sign each request individually. There is nothing special\n               about signing multipart upload requests. For more information about signing, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html\">Authenticating Requests (Amazon Web Services Signature Version 4)</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - For information about the permissions required to use the multipart upload API, see\n                        <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart\n                           upload and permissions</a> in the <i>Amazon S3 User Guide</i>. </p>\n                     <p>To perform a multipart upload with encryption by using an Amazon Web Services KMS key, the requester\n                        must have permission to the <code>kms:Decrypt</code> and <code>kms:GenerateDataKey*</code>\n                        actions on the key. These permissions are required because Amazon S3 must decrypt and read data\n                        from the encrypted file parts before it completes the multipart upload. For more\n                        information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API\n                           and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting data using\n                              server-side encryption with Amazon Web Services KMS</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose buckets</b> - Server-side encryption is for data encryption at rest. Amazon S3 encrypts your data as it\n                        writes it to disks in its data centers and decrypts it when you access it. Amazon S3\n                        automatically encrypts all new objects that are uploaded to an S3 bucket. When doing a\n                        multipart upload, if you don't specify encryption information in your request, the\n                        encryption setting of the uploaded parts is set to the default encryption configuration of\n                        the destination bucket. By default, all buckets have a base level of encryption\n                        configuration that uses server-side encryption with Amazon S3 managed keys (SSE-S3). If the\n                        destination bucket has a default encryption configuration that uses server-side encryption\n                        with an Key Management Service (KMS) key (SSE-KMS), or a customer-provided encryption key (SSE-C),\n                        Amazon S3 uses the corresponding KMS key, or a customer-provided key to encrypt the uploaded\n                        parts. When you perform a CreateMultipartUpload operation, if you want to use a different\n                        type of encryption setting for the uploaded parts, you can request that Amazon S3 encrypts the\n                        object with a different encryption key (such as an Amazon S3 managed key, a KMS key, or a customer-provided key). When the encryption\n                        setting in your request is different from the default encryption configuration of the\n                        destination bucket, the encryption setting in your request takes precedence. If you choose\n                        to provide your own encryption key, the request headers you provide in <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n                        and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a> requests must match the headers you used in the <code>CreateMultipartUpload</code> request.</p>\n                     <ul>\n                        <li>\n                           <p>Use KMS keys (SSE-KMS) that include the Amazon Web Services managed key\n                              (<code>aws/s3</code>) and KMS customer managed keys stored in Key Management Service (KMS) –\n                              If you want Amazon Web Services to manage the keys used to encrypt data, specify the\n                              following headers in the request.</p>\n                           <ul>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-aws-kms-key-id</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-context</code>\n                                 </p>\n                              </li>\n                           </ul>\n                           <note>\n                              <ul>\n                                 <li>\n                                    <p>If you specify <code>x-amz-server-side-encryption:aws:kms</code>, but\n                                    don't provide <code>x-amz-server-side-encryption-aws-kms-key-id</code>,\n                                    Amazon S3 uses the Amazon Web Services managed key (<code>aws/s3</code> key) in KMS to\n                                    protect the data.</p>\n                                 </li>\n                                 <li>\n                                    <p>To perform a multipart upload with encryption by using an Amazon Web Services KMS key, the requester\n                                    must have permission to the <code>kms:Decrypt</code> and <code>kms:GenerateDataKey*</code>\n                                    actions on the key. These permissions are required because Amazon S3 must decrypt and read data\n                                    from the encrypted file parts before it completes the multipart upload. For more\n                                    information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API\n                                       and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting data using\n                                          server-side encryption with Amazon Web Services KMS</a> in the\n                                    <i>Amazon S3 User Guide</i>.</p>\n                                 </li>\n                                 <li>\n                                    <p>If your Identity and Access Management (IAM) user or role is in the same Amazon Web Services account as the KMS key,\n                                    then you must have these permissions on the key policy. If your IAM user or role is in a different account from the key, then you must have the permissions on both the key\n                                    policy and your IAM user or role.</p>\n                                 </li>\n                                 <li>\n                                    <p>All <code>GET</code> and <code>PUT</code> requests for an object\n                                       protected by KMS fail if you don't make them by using Secure Sockets\n                                       Layer (SSL), Transport Layer Security (TLS), or Signature Version\n                                       4. For information about configuring any of the officially supported Amazon Web Services\n                                       SDKs and Amazon Web Services CLI, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingAWSSDK.html#specify-signature-version\">Specifying the Signature Version in Request Authentication</a>\n                                       in the <i>Amazon S3 User Guide</i>.</p>\n                                 </li>\n                              </ul>\n                           </note>\n                           <p>For more information about server-side encryption with KMS keys\n                              (SSE-KMS), see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting Data\n                                 Using Server-Side Encryption with KMS keys</a> in the <i>Amazon S3 User Guide</i>.</p>\n                        </li>\n                        <li>\n                           <p>Use customer-provided encryption keys (SSE-C) – If you want to manage\n                              your own encryption keys, provide all the following headers in the\n                              request.</p>\n                           <ul>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-algorithm</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-key</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-key-MD5</code>\n                                 </p>\n                              </li>\n                           </ul>\n                           <p>For more information about server-side encryption with customer-provided\n                              encryption keys (SSE-C), see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html\">\n                                 Protecting data using server-side encryption with customer-provided\n                                 encryption keys (SSE-C)</a> in the <i>Amazon S3 User Guide</i>.</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory buckets</b> -For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>CreateMultipartUpload</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<p>This action initiates a multipart upload and returns an upload ID. This upload ID is\n         used to associate all of the parts in the specific multipart upload. You specify this\n         upload ID in each of your subsequent upload part requests (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>). You also include this\n         upload ID in the final request to either complete or abort the multipart upload\n         request. For more information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html\">Multipart Upload Overview</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>After you initiate a multipart upload and upload one or more parts, to stop being\n            charged for storing the uploaded parts, you must either complete or abort the multipart\n            upload. Amazon S3 frees up the space used to store the parts and stops charging you for\n            storing them only after you either complete or abort a multipart upload. </p>\n         </note>\n         <p>If you have configured a lifecycle rule to abort incomplete multipart uploads, the created multipart  \n         upload must be completed within the number of days specified in the bucket lifecycle\n         configuration. Otherwise, the incomplete multipart upload becomes eligible for an abort\n         action and Amazon S3 aborts the multipart upload. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config\">Aborting Incomplete Multipart Uploads Using a Bucket Lifecycle\n            Configuration</a>.</p>\n         <note>\n            <ul>\n               <li>\n                  <p>\n                     <b>Directory buckets </b> - S3 Lifecycle is not supported by directory buckets.</p>\n               </li>\n               <li>\n                  <p>\n                     <b>Directory buckets </b> - For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n                     </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n               </li>\n            </ul>\n         </note>\n         <dl>\n            <dt>Request signing</dt>\n            <dd>\n               <p>For request signing, multipart upload is just a series of regular requests. You initiate\n               a multipart upload, send one or more requests to upload parts, and then complete the\n               multipart upload process. You sign each request individually. There is nothing special\n               about signing multipart upload requests. For more information about signing, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html\">Authenticating Requests (Amazon Web Services Signature Version 4)</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - To\n                        perform a multipart upload with encryption using an Key Management Service (KMS)\n                        KMS key, the requester must have permission to the\n                           <code>kms:Decrypt</code> and <code>kms:GenerateDataKey</code> actions on\n                        the key. The requester must also have permissions for the\n                           <code>kms:GenerateDataKey</code> action for the\n                           <code>CreateMultipartUpload</code> API. Then, the requester needs\n                        permissions for the <code>kms:Decrypt</code> action on the\n                           <code>UploadPart</code> and <code>UploadPartCopy</code> APIs. These\n                        permissions are required because Amazon S3 must decrypt and read data from the\n                        encrypted file parts before it completes the multipart upload. For more\n                        information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting data\n                           using server-side encryption with Amazon Web Services KMS</a> in the\n                           <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose buckets</b> - Server-side encryption is for data encryption at rest. Amazon S3 encrypts your data as it\n                        writes it to disks in its data centers and decrypts it when you access it. Amazon S3\n                        automatically encrypts all new objects that are uploaded to an S3 bucket. When doing a\n                        multipart upload, if you don't specify encryption information in your request, the\n                        encryption setting of the uploaded parts is set to the default encryption configuration of\n                        the destination bucket. By default, all buckets have a base level of encryption\n                        configuration that uses server-side encryption with Amazon S3 managed keys (SSE-S3). If the\n                        destination bucket has a default encryption configuration that uses server-side encryption\n                        with an Key Management Service (KMS) key (SSE-KMS), or a customer-provided encryption key (SSE-C),\n                        Amazon S3 uses the corresponding KMS key, or a customer-provided key to encrypt the uploaded\n                        parts. When you perform a CreateMultipartUpload operation, if you want to use a different\n                        type of encryption setting for the uploaded parts, you can request that Amazon S3 encrypts the\n                        object with a different encryption key (such as an Amazon S3 managed key, a KMS key, or a customer-provided key). When the encryption\n                        setting in your request is different from the default encryption configuration of the\n                        destination bucket, the encryption setting in your request takes precedence. If you choose\n                        to provide your own encryption key, the request headers you provide in <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n                        and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a> requests must match the headers you used in the <code>CreateMultipartUpload</code> request.</p>\n                     <ul>\n                        <li>\n                           <p>Use KMS keys (SSE-KMS) that include the Amazon Web Services managed key\n                              (<code>aws/s3</code>) and KMS customer managed keys stored in Key Management Service (KMS) –\n                              If you want Amazon Web Services to manage the keys used to encrypt data, specify the\n                              following headers in the request.</p>\n                           <ul>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-aws-kms-key-id</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-context</code>\n                                 </p>\n                              </li>\n                           </ul>\n                           <note>\n                              <ul>\n                                 <li>\n                                    <p>If you specify <code>x-amz-server-side-encryption:aws:kms</code>, but\n                                    don't provide <code>x-amz-server-side-encryption-aws-kms-key-id</code>,\n                                    Amazon S3 uses the Amazon Web Services managed key (<code>aws/s3</code> key) in KMS to\n                                    protect the data.</p>\n                                 </li>\n                                 <li>\n                                    <p>To perform a multipart upload with encryption by using an Amazon Web Services KMS key, the requester\n                                    must have permission to the <code>kms:Decrypt</code> and <code>kms:GenerateDataKey*</code>\n                                    actions on the key. These permissions are required because Amazon S3 must decrypt and read data\n                                    from the encrypted file parts before it completes the multipart upload. For more\n                                    information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API\n                                       and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting data using\n                                          server-side encryption with Amazon Web Services KMS</a> in the\n                                    <i>Amazon S3 User Guide</i>.</p>\n                                 </li>\n                                 <li>\n                                    <p>If your Identity and Access Management (IAM) user or role is in the same Amazon Web Services account as the KMS key,\n                                    then you must have these permissions on the key policy. If your IAM user or role is in a different account from the key, then you must have the permissions on both the key\n                                    policy and your IAM user or role.</p>\n                                 </li>\n                                 <li>\n                                    <p>All <code>GET</code> and <code>PUT</code> requests for an object\n                                       protected by KMS fail if you don't make them by using Secure Sockets\n                                       Layer (SSL), Transport Layer Security (TLS), or Signature Version\n                                       4. For information about configuring any of the officially supported Amazon Web Services\n                                       SDKs and Amazon Web Services CLI, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingAWSSDK.html#specify-signature-version\">Specifying the Signature Version in Request Authentication</a>\n                                       in the <i>Amazon S3 User Guide</i>.</p>\n                                 </li>\n                              </ul>\n                           </note>\n                           <p>For more information about server-side encryption with KMS keys\n                              (SSE-KMS), see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting Data\n                                 Using Server-Side Encryption with KMS keys</a> in the <i>Amazon S3 User Guide</i>.</p>\n                        </li>\n                        <li>\n                           <p>Use customer-provided encryption keys (SSE-C) – If you want to manage\n                              your own encryption keys, provide all the following headers in the\n                              request.</p>\n                           <ul>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-algorithm</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-key</code>\n                                 </p>\n                              </li>\n                              <li>\n                                 <p>\n                                    <code>x-amz-server-side-encryption-customer-key-MD5</code>\n                                 </p>\n                              </li>\n                           </ul>\n                           <p>For more information about server-side encryption with customer-provided\n                              encryption keys (SSE-C), see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html\">\n                                 Protecting data using server-side encryption with customer-provided\n                                 encryption keys (SSE-C)</a> in the <i>Amazon S3 User Guide</i>.</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory buckets</b> -For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>CreateMultipartUpload</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#examples": [
           {
             "title": "To initiate a multipart upload",
@@ -24094,7 +24101,7 @@
         "ChecksumMode": {
           "target": "com.amazonaws.s3#ChecksumMode",
           "traits": {
-            "smithy.api#documentation": "<p>To retrieve the checksum, this mode must be enabled.</p>",
+            "smithy.api#documentation": "<p>To retrieve the checksum, this mode must be enabled.</p>\n         <p>In addition, if you enable checksum mode and the object is uploaded with a \n         <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html\">checksum</a> \n         and encrypted with an Key Management Service (KMS) key, you must have permission to use the \n         <code>kms:Decrypt</code> action to retrieve the checksum.</p>",
             "smithy.api#httpHeader": "x-amz-checksum-mode"
           }
         }
@@ -25144,7 +25151,7 @@
         "ChecksumMode": {
           "target": "com.amazonaws.s3#ChecksumMode",
           "traits": {
-            "smithy.api#documentation": "<p>To retrieve the checksum, this parameter must be enabled.</p>\n         <p>In addition, if you enable <code>ChecksumMode</code> and the object is encrypted with\n         Amazon Web Services Key Management Service (Amazon Web Services KMS), you must have permission to use the\n            <code>kms:Decrypt</code> action for the request to succeed.</p>",
+            "smithy.api#documentation": "<p>To retrieve the checksum, this parameter must be enabled.</p>\n         <p>In addition, if you enable checksum mode and the object is uploaded with a \n         <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_Checksum.html\">checksum</a> \n         and encrypted with an Key Management Service (KMS) key, you must have permission to use the \n         <code>kms:Decrypt</code> action to retrieve the checksum.</p>",
             "smithy.api#httpHeader": "x-amz-checksum-mode"
           }
         }
@@ -31367,6 +31374,13 @@
             "smithy.api#httpHeader": "Expires"
           }
         },
+        "IfNoneMatch": {
+          "target": "com.amazonaws.s3#IfNoneMatch",
+          "traits": {
+            "smithy.api#documentation": "<p>Uploads the object only if the object key name does not already exist in the bucket specified. Otherwise, Amazon S3 returns a <code>412 Precondition Failed</code> error.</p>\n         <p>If a conflicting operation occurs during the upload S3 returns a <code>409 ConditionalRequestConflict</code> response. On a 409 failure you should retry the upload.</p>\n         <p>Expects the '*' (asterisk) character.</p>\n         <p>For more information about conditional requests, see <a href=\"https://tools.ietf.org/html/rfc7232\">RFC 7232</a>, or <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-requests.html\">Conditional requests</a> in the <i>Amazon S3 User Guide</i>.</p>",
+            "smithy.api#httpHeader": "If-None-Match"
+          }
+        },
         "GrantFullControl": {
           "target": "com.amazonaws.s3#GrantFullControl",
           "traits": {
@@ -32384,7 +32398,7 @@
         "aws.protocols#httpChecksum": {
           "requestAlgorithmMember": "ChecksumAlgorithm"
         },
-        "smithy.api#documentation": "<note>\n            <p>This operation is not supported by directory buckets.</p>\n         </note>\n         <p>Restores an archived copy of an object back into Amazon S3</p>\n         <p>This functionality is not supported for Amazon S3 on Outposts.</p>\n         <p>This action performs the following types of requests: </p>\n         <ul>\n            <li>\n               <p>\n                  <code>restore an archive</code> - Restore an archived object</p>\n            </li>\n         </ul>\n         <p>For more information about the <code>S3</code> structure in the request body, see the\n         following:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html\">PutObject</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/S3_ACLs_UsingACLs.html\">Managing Access with ACLs</a> in the\n               <i>Amazon S3 User Guide</i>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html\">Protecting Data Using Server-Side Encryption</a> in the\n                  <i>Amazon S3 User Guide</i>\n               </p>\n            </li>\n         </ul>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <p>To use this operation, you must have permissions to perform the\n                     <code>s3:RestoreObject</code> action. The bucket owner has this permission by\n                  default and can grant this permission to others. For more information about\n                  permissions, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources\">Permissions Related to Bucket Subresource Operations</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html\">Managing Access Permissions to Your Amazon S3 Resources</a> in the\n                     <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Restoring objects</dt>\n            <dd>\n               <p>Objects that you archive to the S3 Glacier Flexible Retrieval Flexible Retrieval\n                  or S3 Glacier Deep Archive storage class, and S3 Intelligent-Tiering Archive or\n                  S3 Intelligent-Tiering Deep Archive tiers, are not accessible in real time. For objects in the\n                  S3 Glacier Flexible Retrieval Flexible Retrieval or S3 Glacier Deep Archive\n                  storage classes, you must first initiate a restore request, and then wait until a\n                  temporary copy of the object is available. If you want a permanent copy of the\n                  object, create a copy of it in the Amazon S3 Standard storage class in your S3 bucket.\n                  To access an archived object, you must restore the object for the duration (number\n                  of days) that you specify. For objects in the Archive Access or Deep Archive\n                  Access tiers of S3 Intelligent-Tiering, you must first initiate a restore request,\n                  and then wait until the object is moved into the Frequent Access tier.</p>\n               <p>To restore a specific object version, you can provide a version ID. If you\n                  don't provide a version ID, Amazon S3 restores the current version.</p>\n               <p>When restoring an archived object, you can specify one of the following data\n                  access tier options in the <code>Tier</code> element of the request body: </p>\n               <ul>\n                  <li>\n                     <p>\n                        <code>Expedited</code> - Expedited retrievals allow you to quickly access\n                        your data stored in the S3 Glacier Flexible Retrieval Flexible Retrieval\n                        storage class or S3 Intelligent-Tiering Archive tier when occasional urgent requests\n                        for restoring archives are required. For all but the largest archived\n                        objects (250 MB+), data accessed using Expedited retrievals is typically\n                        made available within 1–5 minutes. Provisioned capacity ensures that\n                        retrieval capacity for Expedited retrievals is available when you need it.\n                        Expedited retrievals and provisioned capacity are not available for objects\n                        stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <code>Standard</code> - Standard retrievals allow you to access any of\n                        your archived objects within several hours. This is the default option for\n                        retrieval requests that do not specify the retrieval option. Standard\n                        retrievals typically finish within 3–5 hours for objects stored in the\n                        S3 Glacier Flexible Retrieval Flexible Retrieval storage class or\n                        S3 Intelligent-Tiering Archive tier. They typically finish within 12 hours for\n                        objects stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier. Standard retrievals are free for objects stored\n                        in S3 Intelligent-Tiering.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <code>Bulk</code> - Bulk retrievals free for objects stored in the\n                        S3 Glacier Flexible Retrieval and S3 Intelligent-Tiering storage classes,\n                        enabling you to retrieve large amounts, even petabytes, of data at no cost.\n                        Bulk retrievals typically finish within 5–12 hours for objects stored in the\n                        S3 Glacier Flexible Retrieval Flexible Retrieval storage class or\n                        S3 Intelligent-Tiering Archive tier. Bulk retrievals are also the lowest-cost\n                        retrieval option when restoring objects from\n                        S3 Glacier Deep Archive. They typically finish within 48 hours for\n                        objects stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier. </p>\n                  </li>\n               </ul>\n               <p>For more information about archive retrieval options and provisioned capacity\n                  for <code>Expedited</code> data access, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects.html\">Restoring Archived\n                     Objects</a> in the <i>Amazon S3 User Guide</i>. </p>\n               <p>You can use Amazon S3 restore speed upgrade to change the restore speed to a faster\n                  speed while it is in progress. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects.html#restoring-objects-upgrade-tier.title.html\"> Upgrading the speed of an in-progress restore</a> in the\n                     <i>Amazon S3 User Guide</i>. </p>\n               <p>To get the status of object restoration, you can send a <code>HEAD</code>\n                  request. Operations return the <code>x-amz-restore</code> header, which provides\n                  information about the restoration status, in the response. You can use Amazon S3 event\n                  notifications to notify you when a restore is initiated or completed. For more\n                  information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html\">Configuring Amazon S3 Event\n                     Notifications</a> in the <i>Amazon S3 User Guide</i>.</p>\n               <p>After restoring an archived object, you can update the restoration period by\n                  reissuing the request with a new period. Amazon S3 updates the restoration period\n                  relative to the current time and charges only for the request-there are no\n                  data transfer charges. You cannot update the restoration period when Amazon S3 is\n                  actively processing your current restore request for the object.</p>\n               <p>If your bucket has a lifecycle configuration with a rule that includes an\n                  expiration action, the object expiration overrides the life span that you specify\n                  in a restore request. For example, if you restore an object copy for 10 days, but\n                  the object is scheduled to expire in 3 days, Amazon S3 deletes the object in 3 days.\n                  For more information about lifecycle configuration, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html\">Object Lifecycle\n                     Management</a> in <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Responses</dt>\n            <dd>\n               <p>A successful action returns either the <code>200 OK</code> or <code>202\n                     Accepted</code> status code. </p>\n               <ul>\n                  <li>\n                     <p>If the object is not previously restored, then Amazon S3 returns <code>202\n                           Accepted</code> in the response. </p>\n                  </li>\n                  <li>\n                     <p>If the object is previously restored, Amazon S3 returns <code>200 OK</code> in\n                        the response. </p>\n                  </li>\n               </ul>\n               <ul>\n                  <li>\n                     <p>Special errors:</p>\n                     <ul>\n                        <li>\n                           <p>\n                              <i>Code: RestoreAlreadyInProgress</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>Cause: Object restore is already in progress.</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>HTTP Status Code: 409 Conflict</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>SOAP Fault Code Prefix: Client</i>\n                           </p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <ul>\n                        <li>\n                           <p>\n                              <i>Code: GlacierExpeditedRetrievalNotAvailable</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>Cause: expedited retrievals are currently not available.\n                                 Try again later. (Returned if there is insufficient capacity to\n                                 process the Expedited request. This error applies only to Expedited\n                                 retrievals and not to S3 Standard or Bulk retrievals.)</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>HTTP Status Code: 503</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>SOAP Fault Code Prefix: N/A</i>\n                           </p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>RestoreObject</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotificationConfiguration.html\">GetBucketNotificationConfiguration</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<note>\n            <p>This operation is not supported by directory buckets.</p>\n         </note>\n         <important>\n            <p>The <code>SELECT</code> job type for the RestoreObject operation is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>Restores an archived copy of an object back into Amazon S3</p>\n         <p>This functionality is not supported for Amazon S3 on Outposts.</p>\n         <p>This action performs the following types of requests: </p>\n         <ul>\n            <li>\n               <p>\n                  <code>restore an archive</code> - Restore an archived object</p>\n            </li>\n         </ul>\n         <p>For more information about the <code>S3</code> structure in the request body, see the\n         following:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html\">PutObject</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/S3_ACLs_UsingACLs.html\">Managing Access with ACLs</a> in the\n               <i>Amazon S3 User Guide</i>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html\">Protecting Data Using Server-Side Encryption</a> in the\n                  <i>Amazon S3 User Guide</i>\n               </p>\n            </li>\n         </ul>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <p>To use this operation, you must have permissions to perform the\n                     <code>s3:RestoreObject</code> action. The bucket owner has this permission by\n                  default and can grant this permission to others. For more information about\n                  permissions, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html#using-with-s3-actions-related-to-bucket-subresources\">Permissions Related to Bucket Subresource Operations</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-access-control.html\">Managing Access Permissions to Your Amazon S3 Resources</a> in the\n                     <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Restoring objects</dt>\n            <dd>\n               <p>Objects that you archive to the S3 Glacier Flexible Retrieval Flexible Retrieval\n                  or S3 Glacier Deep Archive storage class, and S3 Intelligent-Tiering Archive or\n                  S3 Intelligent-Tiering Deep Archive tiers, are not accessible in real time. For objects in the\n                  S3 Glacier Flexible Retrieval Flexible Retrieval or S3 Glacier Deep Archive\n                  storage classes, you must first initiate a restore request, and then wait until a\n                  temporary copy of the object is available. If you want a permanent copy of the\n                  object, create a copy of it in the Amazon S3 Standard storage class in your S3 bucket.\n                  To access an archived object, you must restore the object for the duration (number\n                  of days) that you specify. For objects in the Archive Access or Deep Archive\n                  Access tiers of S3 Intelligent-Tiering, you must first initiate a restore request,\n                  and then wait until the object is moved into the Frequent Access tier.</p>\n               <p>To restore a specific object version, you can provide a version ID. If you\n                  don't provide a version ID, Amazon S3 restores the current version.</p>\n               <p>When restoring an archived object, you can specify one of the following data\n                  access tier options in the <code>Tier</code> element of the request body: </p>\n               <ul>\n                  <li>\n                     <p>\n                        <code>Expedited</code> - Expedited retrievals allow you to quickly access\n                        your data stored in the S3 Glacier Flexible Retrieval Flexible Retrieval\n                        storage class or S3 Intelligent-Tiering Archive tier when occasional urgent requests\n                        for restoring archives are required. For all but the largest archived\n                        objects (250 MB+), data accessed using Expedited retrievals is typically\n                        made available within 1–5 minutes. Provisioned capacity ensures that\n                        retrieval capacity for Expedited retrievals is available when you need it.\n                        Expedited retrievals and provisioned capacity are not available for objects\n                        stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <code>Standard</code> - Standard retrievals allow you to access any of\n                        your archived objects within several hours. This is the default option for\n                        retrieval requests that do not specify the retrieval option. Standard\n                        retrievals typically finish within 3–5 hours for objects stored in the\n                        S3 Glacier Flexible Retrieval Flexible Retrieval storage class or\n                        S3 Intelligent-Tiering Archive tier. They typically finish within 12 hours for\n                        objects stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier. Standard retrievals are free for objects stored\n                        in S3 Intelligent-Tiering.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <code>Bulk</code> - Bulk retrievals free for objects stored in the\n                        S3 Glacier Flexible Retrieval and S3 Intelligent-Tiering storage classes,\n                        enabling you to retrieve large amounts, even petabytes, of data at no cost.\n                        Bulk retrievals typically finish within 5–12 hours for objects stored in the\n                        S3 Glacier Flexible Retrieval Flexible Retrieval storage class or\n                        S3 Intelligent-Tiering Archive tier. Bulk retrievals are also the lowest-cost\n                        retrieval option when restoring objects from\n                        S3 Glacier Deep Archive. They typically finish within 48 hours for\n                        objects stored in the S3 Glacier Deep Archive storage class or\n                        S3 Intelligent-Tiering Deep Archive tier. </p>\n                  </li>\n               </ul>\n               <p>For more information about archive retrieval options and provisioned capacity\n                  for <code>Expedited</code> data access, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects.html\">Restoring Archived\n                     Objects</a> in the <i>Amazon S3 User Guide</i>. </p>\n               <p>You can use Amazon S3 restore speed upgrade to change the restore speed to a faster\n                  speed while it is in progress. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects.html#restoring-objects-upgrade-tier.title.html\"> Upgrading the speed of an in-progress restore</a> in the\n                     <i>Amazon S3 User Guide</i>. </p>\n               <p>To get the status of object restoration, you can send a <code>HEAD</code>\n                  request. Operations return the <code>x-amz-restore</code> header, which provides\n                  information about the restoration status, in the response. You can use Amazon S3 event\n                  notifications to notify you when a restore is initiated or completed. For more\n                  information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html\">Configuring Amazon S3 Event\n                     Notifications</a> in the <i>Amazon S3 User Guide</i>.</p>\n               <p>After restoring an archived object, you can update the restoration period by\n                  reissuing the request with a new period. Amazon S3 updates the restoration period\n                  relative to the current time and charges only for the request-there are no\n                  data transfer charges. You cannot update the restoration period when Amazon S3 is\n                  actively processing your current restore request for the object.</p>\n               <p>If your bucket has a lifecycle configuration with a rule that includes an\n                  expiration action, the object expiration overrides the life span that you specify\n                  in a restore request. For example, if you restore an object copy for 10 days, but\n                  the object is scheduled to expire in 3 days, Amazon S3 deletes the object in 3 days.\n                  For more information about lifecycle configuration, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html\">Object Lifecycle\n                     Management</a> in <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Responses</dt>\n            <dd>\n               <p>A successful action returns either the <code>200 OK</code> or <code>202\n                     Accepted</code> status code. </p>\n               <ul>\n                  <li>\n                     <p>If the object is not previously restored, then Amazon S3 returns <code>202\n                           Accepted</code> in the response. </p>\n                  </li>\n                  <li>\n                     <p>If the object is previously restored, Amazon S3 returns <code>200 OK</code> in\n                        the response. </p>\n                  </li>\n               </ul>\n               <ul>\n                  <li>\n                     <p>Special errors:</p>\n                     <ul>\n                        <li>\n                           <p>\n                              <i>Code: RestoreAlreadyInProgress</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>Cause: Object restore is already in progress.</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>HTTP Status Code: 409 Conflict</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>SOAP Fault Code Prefix: Client</i>\n                           </p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <ul>\n                        <li>\n                           <p>\n                              <i>Code: GlacierExpeditedRetrievalNotAvailable</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>Cause: expedited retrievals are currently not available.\n                                 Try again later. (Returned if there is insufficient capacity to\n                                 process the Expedited request. This error applies only to Expedited\n                                 retrievals and not to S3 Standard or Bulk retrievals.)</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>HTTP Status Code: 503</i>\n                           </p>\n                        </li>\n                        <li>\n                           <p>\n                              <i>SOAP Fault Code Prefix: N/A</i>\n                           </p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>RestoreObject</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotificationConfiguration.html\">GetBucketNotificationConfiguration</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#examples": [
           {
             "title": "To restore an archived object",
@@ -32512,7 +32526,7 @@
         "Type": {
           "target": "com.amazonaws.s3#RestoreRequestType",
           "traits": {
-            "smithy.api#documentation": "<p>Type of restore request.</p>"
+            "smithy.api#documentation": "<important>\n            <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>Type of restore request.</p>"
           }
         },
         "Tier": {
@@ -32530,7 +32544,7 @@
         "SelectParameters": {
           "target": "com.amazonaws.s3#SelectParameters",
           "traits": {
-            "smithy.api#documentation": "<p>Describes the parameters for Select job types.</p>"
+            "smithy.api#documentation": "<important>\n            <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>Describes the parameters for Select job types.</p>"
           }
         },
         "OutputLocation": {
@@ -32755,7 +32769,7 @@
         "target": "com.amazonaws.s3#SelectObjectContentOutput"
       },
       "traits": {
-        "smithy.api#documentation": "<note>\n            <p>This operation is not supported by directory buckets.</p>\n         </note>\n         <p>This action filters the contents of an Amazon S3 object based on a simple structured query\n         language (SQL) statement. In the request, along with the SQL expression, you must also\n         specify a data serialization format (JSON, CSV, or Apache Parquet) of the object. Amazon S3 uses\n         this format to parse object data into records, and returns only records that match the\n         specified SQL expression. You must also specify the data serialization format for the\n         response.</p>\n         <p>This functionality is not supported for Amazon S3 on Outposts.</p>\n         <p>For more information about Amazon S3 Select, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/selecting-content-from-objects.html\">Selecting Content from\n            Objects</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-glacier-select-sql-reference-select.html\">SELECT\n            Command</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <p></p>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <p>You must have the <code>s3:GetObject</code> permission for this operation. Amazon S3\n                  Select does not support anonymous access. For more information about permissions,\n                  see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/using-with-s3-actions.html\">Specifying Permissions in\n                     a Policy</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Object Data Formats</dt>\n            <dd>\n               <p>You can use Amazon S3 Select to query objects that have the following format\n                  properties:</p>\n               <ul>\n                  <li>\n                     <p>\n                        <i>CSV, JSON, and Parquet</i> - Objects must be in CSV,\n                        JSON, or Parquet format.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>UTF-8</i> - UTF-8 is the only encoding type Amazon S3 Select\n                        supports.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>GZIP or BZIP2</i> - CSV and JSON files can be compressed\n                        using GZIP or BZIP2. GZIP and BZIP2 are the only compression formats that\n                        Amazon S3 Select supports for CSV and JSON files. Amazon S3 Select supports columnar\n                        compression for Parquet using GZIP or Snappy. Amazon S3 Select does not support\n                        whole-object compression for Parquet objects.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>Server-side encryption</i> - Amazon S3 Select supports\n                        querying objects that are protected with server-side encryption.</p>\n                     <p>For objects that are encrypted with customer-provided encryption keys\n                        (SSE-C), you must use HTTPS, and you must use the headers that are\n                        documented in the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>. For more\n                        information about SSE-C, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html\">Server-Side Encryption (Using Customer-Provided Encryption Keys)</a>\n                        in the <i>Amazon S3 User Guide</i>.</p>\n                     <p>For objects that are encrypted with Amazon S3 managed keys (SSE-S3) and\n                        Amazon Web Services KMS keys (SSE-KMS), server-side encryption is handled transparently,\n                        so you don't need to specify anything. For more information about\n                        server-side encryption, including SSE-S3 and SSE-KMS, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html\">Protecting Data Using Server-Side Encryption</a> in the\n                           <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Working with the Response Body</dt>\n            <dd>\n               <p>Given the response size is unknown, Amazon S3 Select streams the response as a\n                  series of messages and includes a <code>Transfer-Encoding</code> header with\n                     <code>chunked</code> as its value in the response. For more information, see\n                     <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/RESTSelectObjectAppendix.html\">Appendix:\n                     SelectObjectContent\n                  Response</a>.</p>\n            </dd>\n            <dt>GetObject Support</dt>\n            <dd>\n               <p>The <code>SelectObjectContent</code> action does not support the following\n                     <code>GetObject</code> functionality. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>.</p>\n               <ul>\n                  <li>\n                     <p>\n                        <code>Range</code>: Although you can specify a scan range for an Amazon S3 Select\n                        request (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_SelectObjectContent.html#AmazonS3-SelectObjectContent-request-ScanRange\">SelectObjectContentRequest - ScanRange</a> in the request\n                        parameters), you cannot specify the range of bytes of an object to return.\n                     </p>\n                  </li>\n                  <li>\n                     <p>The <code>GLACIER</code>, <code>DEEP_ARCHIVE</code>, and\n                           <code>REDUCED_REDUNDANCY</code> storage classes, or the\n                           <code>ARCHIVE_ACCESS</code> and <code>DEEP_ARCHIVE_ACCESS</code> access\n                        tiers of the <code>INTELLIGENT_TIERING</code> storage class: You cannot\n                        query objects in the <code>GLACIER</code>, <code>DEEP_ARCHIVE</code>, or\n                           <code>REDUCED_REDUNDANCY</code> storage classes, nor objects in the\n                           <code>ARCHIVE_ACCESS</code> or <code>DEEP_ARCHIVE_ACCESS</code> access\n                        tiers of the <code>INTELLIGENT_TIERING</code> storage class. For more\n                        information about storage classes, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html\">Using Amazon S3\n                           storage classes</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special Errors</dt>\n            <dd>\n               <p>For a list of special errors for this operation, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#SelectObjectContentErrorCodeList\">List of SELECT Object Content Error Codes</a>\n               </p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>SelectObjectContent</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html\">GetBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<note>\n            <p>This operation is not supported by directory buckets.</p>\n         </note>\n         <important>\n            <p>The SelectObjectContent operation is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the operation as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>This action filters the contents of an Amazon S3 object based on a simple structured query\n         language (SQL) statement. In the request, along with the SQL expression, you must also\n         specify a data serialization format (JSON, CSV, or Apache Parquet) of the object. Amazon S3 uses\n         this format to parse object data into records, and returns only records that match the\n         specified SQL expression. You must also specify the data serialization format for the\n         response.</p>\n         <p>This functionality is not supported for Amazon S3 on Outposts.</p>\n         <p>For more information about Amazon S3 Select, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/selecting-content-from-objects.html\">Selecting Content from\n            Objects</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-glacier-select-sql-reference-select.html\">SELECT\n            Command</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <p></p>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <p>You must have the <code>s3:GetObject</code> permission for this operation. Amazon S3\n                  Select does not support anonymous access. For more information about permissions,\n                  see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/using-with-s3-actions.html\">Specifying Permissions in\n                     a Policy</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Object Data Formats</dt>\n            <dd>\n               <p>You can use Amazon S3 Select to query objects that have the following format\n                  properties:</p>\n               <ul>\n                  <li>\n                     <p>\n                        <i>CSV, JSON, and Parquet</i> - Objects must be in CSV,\n                        JSON, or Parquet format.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>UTF-8</i> - UTF-8 is the only encoding type Amazon S3 Select\n                        supports.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>GZIP or BZIP2</i> - CSV and JSON files can be compressed\n                        using GZIP or BZIP2. GZIP and BZIP2 are the only compression formats that\n                        Amazon S3 Select supports for CSV and JSON files. Amazon S3 Select supports columnar\n                        compression for Parquet using GZIP or Snappy. Amazon S3 Select does not support\n                        whole-object compression for Parquet objects.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <i>Server-side encryption</i> - Amazon S3 Select supports\n                        querying objects that are protected with server-side encryption.</p>\n                     <p>For objects that are encrypted with customer-provided encryption keys\n                        (SSE-C), you must use HTTPS, and you must use the headers that are\n                        documented in the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>. For more\n                        information about SSE-C, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html\">Server-Side Encryption (Using Customer-Provided Encryption Keys)</a>\n                        in the <i>Amazon S3 User Guide</i>.</p>\n                     <p>For objects that are encrypted with Amazon S3 managed keys (SSE-S3) and\n                        Amazon Web Services KMS keys (SSE-KMS), server-side encryption is handled transparently,\n                        so you don't need to specify anything. For more information about\n                        server-side encryption, including SSE-S3 and SSE-KMS, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html\">Protecting Data Using Server-Side Encryption</a> in the\n                           <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Working with the Response Body</dt>\n            <dd>\n               <p>Given the response size is unknown, Amazon S3 Select streams the response as a\n                  series of messages and includes a <code>Transfer-Encoding</code> header with\n                     <code>chunked</code> as its value in the response. For more information, see\n                     <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/RESTSelectObjectAppendix.html\">Appendix:\n                     SelectObjectContent\n                  Response</a>.</p>\n            </dd>\n            <dt>GetObject Support</dt>\n            <dd>\n               <p>The <code>SelectObjectContent</code> action does not support the following\n                     <code>GetObject</code> functionality. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>.</p>\n               <ul>\n                  <li>\n                     <p>\n                        <code>Range</code>: Although you can specify a scan range for an Amazon S3 Select\n                        request (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_SelectObjectContent.html#AmazonS3-SelectObjectContent-request-ScanRange\">SelectObjectContentRequest - ScanRange</a> in the request\n                        parameters), you cannot specify the range of bytes of an object to return.\n                     </p>\n                  </li>\n                  <li>\n                     <p>The <code>GLACIER</code>, <code>DEEP_ARCHIVE</code>, and\n                           <code>REDUCED_REDUNDANCY</code> storage classes, or the\n                           <code>ARCHIVE_ACCESS</code> and <code>DEEP_ARCHIVE_ACCESS</code> access\n                        tiers of the <code>INTELLIGENT_TIERING</code> storage class: You cannot\n                        query objects in the <code>GLACIER</code>, <code>DEEP_ARCHIVE</code>, or\n                           <code>REDUCED_REDUNDANCY</code> storage classes, nor objects in the\n                           <code>ARCHIVE_ACCESS</code> or <code>DEEP_ARCHIVE_ACCESS</code> access\n                        tiers of the <code>INTELLIGENT_TIERING</code> storage class. For more\n                        information about storage classes, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html\">Using Amazon S3\n                           storage classes</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special Errors</dt>\n            <dd>\n               <p>For a list of special errors for this operation, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#SelectObjectContentErrorCodeList\">List of SELECT Object Content Error Codes</a>\n               </p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>SelectObjectContent</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html\">GetObject</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html\">GetBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html\">PutBucketLifecycleConfiguration</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#http": {
           "method": "POST",
           "uri": "/{Bucket}/{Key+}?select&select-type=2",
@@ -32909,7 +32923,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>Request to filter the contents of an Amazon S3 object based on a simple Structured Query\n         Language (SQL) statement. In the request, along with the SQL expression, you must specify a\n         data serialization format (JSON or CSV) of the object. Amazon S3 uses this to parse object data\n         into records. It returns only records that match the specified SQL expression. You must\n         also specify the data serialization format for the response. For more information, see\n            <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectSELECTContent.html\">S3Select API Documentation</a>.</p>",
+        "smithy.api#documentation": "<note>\n            <p>Learn Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </note>\n         <p>Request to filter the contents of an Amazon S3 object based on a simple Structured Query\n         Language (SQL) statement. In the request, along with the SQL expression, you must specify a\n         data serialization format (JSON or CSV) of the object. Amazon S3 uses this to parse object data\n         into records. It returns only records that match the specified SQL expression. You must\n         also specify the data serialization format for the response. For more information, see\n            <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectSELECTContent.html\">S3Select API Documentation</a>.</p>",
         "smithy.api#input": {}
       }
     },
@@ -32933,7 +32947,7 @@
         "Expression": {
           "target": "com.amazonaws.s3#Expression",
           "traits": {
-            "smithy.api#documentation": "<p>The expression that is used to query the object.</p>",
+            "smithy.api#documentation": "<important>\n            <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>The expression that is used to query the object.</p>",
             "smithy.api#required": {}
           }
         },
@@ -32946,7 +32960,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>Describes the parameters for Select job types.</p>"
+        "smithy.api#documentation": "<important>\n            <p>Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">Learn more</a>\n            </p>\n         </important>\n         <p>Describes the parameters for Select job types.</p>\n         <p>Learn <a href=\"http://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/\">How to optimize querying your data in Amazon S3</a>  using\n         <a href=\"https://docs.aws.amazon.com/athena/latest/ug/what-is.html\">Amazon Athena</a>, <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/transforming-objects.html\">S3 Object Lambda</a>, or client-side filtering.</p>"
       }
     },
     "com.amazonaws.s3#ServerSideEncryption": {
@@ -33683,7 +33697,7 @@
         "aws.protocols#httpChecksum": {
           "requestAlgorithmMember": "ChecksumAlgorithm"
         },
-        "smithy.api#documentation": "<p>Uploads a part in a multipart upload.</p>\n         <note>\n            <p>In this operation, you provide new data as a part of an object in your request. However, you have an option\n            to specify your existing Amazon S3 object as a data source for the part you are uploading. To\n            upload a part from an existing object, you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a> operation.\n         </p>\n         </note>\n         <p>You must initiate a multipart upload (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>)\n         before you can upload any part. In response to your initiate request, Amazon S3 returns an\n         upload ID, a unique identifier that you must include in your upload part request.</p>\n         <p>Part numbers can be any number from 1 to 10,000, inclusive. A part number uniquely\n         identifies a part and also defines its position within the object being created. If you\n         upload a new part using the same part number that was used with a previous part, the\n         previously uploaded part is overwritten.</p>\n         <p>For information about maximum and minimum part sizes and other multipart upload\n         specifications, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/qfacts.html\">Multipart upload limits</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>After you initiate multipart upload and upload\n         one or more parts, you must either complete or abort multipart upload in order to stop\n         getting charged for storage of the uploaded parts. Only after you either complete or abort\n         multipart upload, Amazon S3 frees up the parts storage and stops charging you for the parts\n         storage.</p>\n         </note>\n         <p>For more information on multipart uploads, go to <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html\">Multipart Upload Overview</a> in the\n         <i>Amazon S3 User Guide </i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> - For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - For information on the permissions required to use the multipart upload API, see \n                        <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart\n                           Upload and Permissions</a> in the <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Data integrity</dt>\n            <dd>\n               <p>\n                  <b>General purpose bucket</b> - To ensure that data is not corrupted traversing the network, specify the\n                     <code>Content-MD5</code> header in the upload part request. Amazon S3 checks the part data against the provided MD5 value. If they do not match, Amazon S3 returns an error. If the upload request is signed with Signature Version 4, then Amazon Web Services S3 uses the\n                        <code>x-amz-content-sha256</code> header as a checksum instead of\n                        <code>Content-MD5</code>. For more information see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html\">Authenticating\n                           Requests: Using the Authorization Header (Amazon Web Services Signature Version 4)</a>. </p>\n               <note>\n                  <p>\n                     <b>Directory buckets</b> - MD5 is not supported by directory buckets. You can use checksum algorithms to check object integrity.</p>\n               </note>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket</b> - Server-side encryption is for data encryption at rest. Amazon S3 encrypts your data as it\n                        writes it to disks in its data centers and decrypts it when you access it. You have \n                        mutually exclusive options to protect data using server-side encryption in Amazon S3, depending\n                        on how you choose to manage the encryption keys. Specifically, the encryption key options\n                        are Amazon S3 managed keys (SSE-S3), Amazon Web Services KMS keys (SSE-KMS), and Customer-Provided Keys\n                        (SSE-C). Amazon S3 encrypts data with server-side encryption using Amazon S3 managed keys (SSE-S3) by\n                        default. You can optionally tell Amazon S3 to encrypt data at rest using server-side encryption\n                        with other key options. The option you use depends on whether you want to use KMS keys\n                        (SSE-KMS) or provide your own encryption key (SSE-C).</p>\n                     <p>Server-side encryption is supported by the S3 Multipart Upload operations. Unless you are\n                        using a customer-provided encryption key (SSE-C), you don't need to specify the encryption\n                        parameters in each UploadPart request. Instead, you only need to specify the server-side\n                        encryption parameters in the initial Initiate Multipart request. For more information, see\n                        <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>.</p>\n                     <p>If you request server-side encryption using a customer-provided encryption key (SSE-C)\n                        in your initiate multipart upload request, you must provide identical encryption\n                        information in each part upload using the following request headers.</p>\n                     <ul>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-algorithm</p>\n                        </li>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-key</p>\n                        </li>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-key-MD5</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket</b> - For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported. </p>\n                  </li>\n               </ul>\n               <p>\n                  For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html\">Using Server-Side\n                     Encryption</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The upload ID might be invalid, or the multipart upload might have been aborted or completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found </p>\n                        </li>\n                        <li>\n                           <p>SOAP Fault Code Prefix: Client</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>UploadPart</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<p>Uploads a part in a multipart upload.</p>\n         <note>\n            <p>In this operation, you provide new data as a part of an object in your request. However, you have an option\n            to specify your existing Amazon S3 object as a data source for the part you are uploading. To\n            upload a part from an existing object, you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPartCopy.html\">UploadPartCopy</a> operation.\n         </p>\n         </note>\n         <p>You must initiate a multipart upload (see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>)\n         before you can upload any part. In response to your initiate request, Amazon S3 returns an\n         upload ID, a unique identifier that you must include in your upload part request.</p>\n         <p>Part numbers can be any number from 1 to 10,000, inclusive. A part number uniquely\n         identifies a part and also defines its position within the object being created. If you\n         upload a new part using the same part number that was used with a previous part, the\n         previously uploaded part is overwritten.</p>\n         <p>For information about maximum and minimum part sizes and other multipart upload\n         specifications, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/qfacts.html\">Multipart upload limits</a> in the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>After you initiate multipart upload and upload\n         one or more parts, you must either complete or abort multipart upload in order to stop\n         getting charged for storage of the uploaded parts. Only after you either complete or abort\n         multipart upload, Amazon S3 frees up the parts storage and stops charging you for the parts\n         storage.</p>\n         </note>\n         <p>For more information on multipart uploads, go to <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html\">Multipart Upload Overview</a> in the\n         <i>Amazon S3 User Guide </i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> - For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - To\n                        perform a multipart upload with encryption using an Key Management Service key, the\n                        requester must have permission to the <code>kms:Decrypt</code> and\n                           <code>kms:GenerateDataKey</code> actions on the key. The requester must\n                        also have permissions for the <code>kms:GenerateDataKey</code> action for\n                        the <code>CreateMultipartUpload</code> API. Then, the requester needs\n                        permissions for the <code>kms:Decrypt</code> action on the\n                           <code>UploadPart</code> and <code>UploadPartCopy</code> APIs.</p>\n                     <p>These permissions are required because Amazon S3 must decrypt and read data\n                        from the encrypted file parts before it completes the multipart upload. For\n                        more information about KMS permissions, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting data\n                           using server-side encryption with KMS</a> in the\n                           <i>Amazon S3 User Guide</i>. For information about the\n                        permissions required to use the multipart upload API, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart upload and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API and permissions</a> in the\n                           <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Data integrity</dt>\n            <dd>\n               <p>\n                  <b>General purpose bucket</b> - To ensure that data is not corrupted traversing the network, specify the\n                     <code>Content-MD5</code> header in the upload part request. Amazon S3 checks the part data against the provided MD5 value. If they do not match, Amazon S3 returns an error. If the upload request is signed with Signature Version 4, then Amazon Web Services S3 uses the\n                        <code>x-amz-content-sha256</code> header as a checksum instead of\n                        <code>Content-MD5</code>. For more information see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html\">Authenticating\n                           Requests: Using the Authorization Header (Amazon Web Services Signature Version 4)</a>. </p>\n               <note>\n                  <p>\n                     <b>Directory buckets</b> - MD5 is not supported by directory buckets. You can use checksum algorithms to check object integrity.</p>\n               </note>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket</b> - Server-side encryption is for data encryption at rest. Amazon S3 encrypts your data as it\n                        writes it to disks in its data centers and decrypts it when you access it. You have \n                        mutually exclusive options to protect data using server-side encryption in Amazon S3, depending\n                        on how you choose to manage the encryption keys. Specifically, the encryption key options\n                        are Amazon S3 managed keys (SSE-S3), Amazon Web Services KMS keys (SSE-KMS), and Customer-Provided Keys\n                        (SSE-C). Amazon S3 encrypts data with server-side encryption using Amazon S3 managed keys (SSE-S3) by\n                        default. You can optionally tell Amazon S3 to encrypt data at rest using server-side encryption\n                        with other key options. The option you use depends on whether you want to use KMS keys\n                        (SSE-KMS) or provide your own encryption key (SSE-C).</p>\n                     <p>Server-side encryption is supported by the S3 Multipart Upload operations. Unless you are\n                        using a customer-provided encryption key (SSE-C), you don't need to specify the encryption\n                        parameters in each UploadPart request. Instead, you only need to specify the server-side\n                        encryption parameters in the initial Initiate Multipart request. For more information, see\n                        <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>.</p>\n                     <p>If you request server-side encryption using a customer-provided encryption key (SSE-C)\n                        in your initiate multipart upload request, you must provide identical encryption\n                        information in each part upload using the following request headers.</p>\n                     <ul>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-algorithm</p>\n                        </li>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-key</p>\n                        </li>\n                        <li>\n                           <p>x-amz-server-side-encryption-customer-key-MD5</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket</b> - For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported. </p>\n                  </li>\n               </ul>\n               <p>\n                  For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html\">Using Server-Side\n                     Encryption</a> in the <i>Amazon S3 User Guide</i>.</p>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The upload ID might be invalid, or the multipart upload might have been aborted or completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found </p>\n                        </li>\n                        <li>\n                           <p>SOAP Fault Code Prefix: Client</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>UploadPart</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#http": {
           "method": "PUT",
           "uri": "/{Bucket}/{Key+}?x-id=UploadPart",
@@ -33700,7 +33714,7 @@
         "target": "com.amazonaws.s3#UploadPartCopyOutput"
       },
       "traits": {
-        "smithy.api#documentation": "<p>Uploads a part by copying data from an existing object as data source. To specify the\n         data source, you add the request header <code>x-amz-copy-source</code> in your request. To specify \n         a byte range, you add the request header <code>x-amz-copy-source-range</code> in your\n         request. </p>\n         <p>For information about maximum and minimum part sizes and other multipart upload\n         specifications, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/qfacts.html\">Multipart upload limits</a> in the <i>Amazon S3 User Guide</i>. </p>\n         <note>\n            <p>Instead of copying data from an existing object as part data, you might use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n            action to upload new data as a part of an object in your request.</p>\n         </note>\n         <p>You must initiate a multipart upload before you can upload any part. In response to your\n         initiate request, Amazon S3 returns the upload ID, a unique identifier that you must include in\n         your upload part request.</p>\n         <p>For conceptual information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/uploadobjusingmpu.html\">Uploading\n         Objects Using Multipart Upload</a> in the\n         <i>Amazon S3 User Guide</i>. For information about copying objects using a single atomic action vs. a multipart\n         upload, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectOperations.html\">Operations on Objects</a> in\n         the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> -  For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Authentication and authorization</dt>\n            <dd>\n               <p>All <code>UploadPartCopy</code> requests must be authenticated and signed by using IAM credentials (access key ID and secret access key for the IAM identities). All headers with the <code>x-amz-</code> prefix, including\n                        <code>x-amz-copy-source</code>, must be signed. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html\">REST Authentication</a>.</p>\n               <p>\n                  <b>Directory buckets</b> - You must use IAM credentials to authenticate and authorize your access to the <code>UploadPartCopy</code> API operation, instead of using the \n                  temporary security credentials through the <code>CreateSession</code> API operation.</p>\n               <p>Amazon Web Services CLI or SDKs handles authentication and authorization on your behalf.</p>\n            </dd>\n            <dt>Permissions</dt>\n            <dd>\n               <p>You must have <code>READ</code> access to the source object and <code>WRITE</code>\n                  access to the destination bucket.</p>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - You must have the permissions in a policy based on the bucket types of your source bucket and destination bucket in an <code>UploadPartCopy</code> operation.</p>\n                     <ul>\n                        <li>\n                           <p>If the source object is in a general purpose bucket, you must have the <b>\n                                 <code>s3:GetObject</code>\n                              </b> permission to read the source object that is being copied. </p>\n                        </li>\n                        <li>\n                           <p>If the destination bucket is a general purpose bucket, you must have the <b>\n                                 <code>s3:PutObject</code>\n                              </b> permission to write the object copy to the destination bucket.\n                           </p>\n                        </li>\n                     </ul>\n                     <p>For information about permissions required to use the multipart upload API, see\n                        <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API and permissions</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> -\n                        You must have permissions in a bucket policy or an IAM identity-based policy based on the source and destination\n                        bucket types in an <code>UploadPartCopy</code> operation.</p>\n                     <ul>\n                        <li>\n                           <p>If the source object that you want to copy is in a\n                              directory bucket, you must have the <b>\n                                 <code>s3express:CreateSession</code>\n                              </b> permission in\n                              the <code>Action</code> element of a policy to read the object. By\n                              default, the session is in the <code>ReadWrite</code> mode. If you\n                              want to restrict the access, you can explicitly set the\n                                 <code>s3express:SessionMode</code> condition key to\n                                 <code>ReadOnly</code> on the copy source bucket.</p>\n                        </li>\n                        <li>\n                           <p>If the copy destination is a directory bucket, you must have the \n                              <b>\n                                 <code>s3express:CreateSession</code>\n                              </b> permission in the\n                              <code>Action</code> element of a policy to write the object\n                              to the destination. The <code>s3express:SessionMode</code> condition\n                              key cannot be set to <code>ReadOnly</code> on the copy destination. </p>\n                        </li>\n                     </ul>\n                     <p>For example policies, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html\">Example bucket policies for S3 Express One Zone</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-identity-policies.html\">Amazon Web Services Identity and Access Management (IAM) identity-based policies for S3 Express One Zone</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose buckets </b> - \n                     \n                     For information about using server-side encryption with customer-provided\n                           encryption keys with the <code>UploadPartCopy</code> operation, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html\">CopyObject</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>.\n                     </p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory buckets </b> - For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The\n                                 upload ID might be invalid, or the multipart upload might have been\n                                 aborted or completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidRequest</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified copy source is not supported as a\n                                    byte-range copy source.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>UploadPartCopy</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
+        "smithy.api#documentation": "<p>Uploads a part by copying data from an existing object as data source. To specify the\n         data source, you add the request header <code>x-amz-copy-source</code> in your request. To specify \n         a byte range, you add the request header <code>x-amz-copy-source-range</code> in your\n         request. </p>\n         <p>For information about maximum and minimum part sizes and other multipart upload\n         specifications, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/qfacts.html\">Multipart upload limits</a> in the <i>Amazon S3 User Guide</i>. </p>\n         <note>\n            <p>Instead of copying data from an existing object as part data, you might use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n            action to upload new data as a part of an object in your request.</p>\n         </note>\n         <p>You must initiate a multipart upload before you can upload any part. In response to your\n         initiate request, Amazon S3 returns the upload ID, a unique identifier that you must include in\n         your upload part request.</p>\n         <p>For conceptual information about multipart uploads, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/uploadobjusingmpu.html\">Uploading\n         Objects Using Multipart Upload</a> in the\n         <i>Amazon S3 User Guide</i>. For information about copying objects using a single atomic action vs. a multipart\n         upload, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectOperations.html\">Operations on Objects</a> in\n         the <i>Amazon S3 User Guide</i>.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> -  For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n               </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n         </note>\n         <dl>\n            <dt>Authentication and authorization</dt>\n            <dd>\n               <p>All <code>UploadPartCopy</code> requests must be authenticated and signed by using IAM credentials (access key ID and secret access key for the IAM identities). All headers with the <code>x-amz-</code> prefix, including\n                        <code>x-amz-copy-source</code>, must be signed. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html\">REST Authentication</a>.</p>\n               <p>\n                  <b>Directory buckets</b> - You must use IAM credentials to authenticate and authorize your access to the <code>UploadPartCopy</code> API operation, instead of using the \n                  temporary security credentials through the <code>CreateSession</code> API operation.</p>\n               <p>Amazon Web Services CLI or SDKs handles authentication and authorization on your behalf.</p>\n            </dd>\n            <dt>Permissions</dt>\n            <dd>\n               <p>You must have <code>READ</code> access to the source object and <code>WRITE</code>\n                  access to the destination bucket.</p>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - You\n                        must have the permissions in a policy based on the bucket types of your\n                        source bucket and destination bucket in an <code>UploadPartCopy</code>\n                        operation.</p>\n                     <ul>\n                        <li>\n                           <p>If the source object is in a general purpose bucket, you must have the\n                                 <b>\n                                 <code>s3:GetObject</code>\n                              </b>\n                              permission to read the source object that is being copied. </p>\n                        </li>\n                        <li>\n                           <p>If the destination bucket is a general purpose bucket, you must have the\n                                 <b>\n                                 <code>s3:PutObject</code>\n                              </b>\n                              permission to write the object copy to the destination bucket. </p>\n                        </li>\n                        <li>\n                           <p>To perform a multipart upload with encryption using an Key Management Service\n                              key, the requester must have permission to the\n                                 <code>kms:Decrypt</code> and <code>kms:GenerateDataKey</code>\n                              actions on the key. The requester must also have permissions for the\n                                 <code>kms:GenerateDataKey</code> action for the\n                                 <code>CreateMultipartUpload</code> API. Then, the requester needs\n                              permissions for the <code>kms:Decrypt</code> action on the\n                                 <code>UploadPart</code> and <code>UploadPartCopy</code> APIs. These\n                              permissions are required because Amazon S3 must decrypt and read data from\n                              the encrypted file parts before it completes the multipart upload. For\n                              more information about KMS permissions, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html\">Protecting\n                                 data using server-side encryption with KMS</a> in the\n                                 <i>Amazon S3 User Guide</i>. For information about the\n                              permissions required to use the multipart upload API, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuAndPermissions.html\">Multipart upload\n                                 and permissions</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions\">Multipart upload API and permissions</a> in the\n                                 <i>Amazon S3 User Guide</i>.</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> -\n                        You must have permissions in a bucket policy or an IAM identity-based policy based on the source and destination\n                        bucket types in an <code>UploadPartCopy</code> operation.</p>\n                     <ul>\n                        <li>\n                           <p>If the source object that you want to copy is in a\n                              directory bucket, you must have the <b>\n                                 <code>s3express:CreateSession</code>\n                              </b> permission in\n                              the <code>Action</code> element of a policy to read the object. By\n                              default, the session is in the <code>ReadWrite</code> mode. If you\n                              want to restrict the access, you can explicitly set the\n                                 <code>s3express:SessionMode</code> condition key to\n                                 <code>ReadOnly</code> on the copy source bucket.</p>\n                        </li>\n                        <li>\n                           <p>If the copy destination is a directory bucket, you must have the \n                              <b>\n                                 <code>s3express:CreateSession</code>\n                              </b> permission in the\n                              <code>Action</code> element of a policy to write the object\n                              to the destination. The <code>s3express:SessionMode</code> condition\n                              key cannot be set to <code>ReadOnly</code> on the copy destination. </p>\n                        </li>\n                     </ul>\n                     <p>For example policies, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-example-bucket-policies.html\">Example bucket policies for S3 Express One Zone</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam-identity-policies.html\">Amazon Web Services Identity and Access Management (IAM) identity-based policies for S3 Express One Zone</a> in the\n                        <i>Amazon S3 User Guide</i>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Encryption</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose buckets </b> - \n                     \n                     For information about using server-side encryption with customer-provided\n                           encryption keys with the <code>UploadPartCopy</code> operation, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html\">CopyObject</a> and <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>.\n                     </p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory buckets </b> - For directory buckets, only server-side encryption with Amazon S3 managed keys (SSE-S3) (<code>AES256</code>) is supported.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Special errors</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>Error Code: <code>NoSuchUpload</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified multipart upload does not exist. The\n                                 upload ID might be invalid, or the multipart upload might have been\n                                 aborted or completed.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 404 Not Found</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>Error Code: <code>InvalidRequest</code>\n                     </p>\n                     <ul>\n                        <li>\n                           <p>Description: The specified copy source is not supported as a\n                                    byte-range copy source.</p>\n                        </li>\n                        <li>\n                           <p>HTTP Status Code: 400 Bad Request</p>\n                        </li>\n                     </ul>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>The following operations are related to <code>UploadPartCopy</code>:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateMultipartUpload.html\">CreateMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_UploadPart.html\">UploadPart</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CompleteMultipartUpload.html\">CompleteMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html\">AbortMultipartUpload</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html\">ListParts</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html\">ListMultipartUploads</a>\n               </p>\n            </li>\n         </ul>",
         "smithy.api#http": {
           "method": "PUT",
           "uri": "/{Bucket}/{Key+}?x-id=UploadPartCopy",