UNPKG

@aws-sdk/client-s3

Version:

AWS SDK for JavaScript S3 Client for Node.js, Browser and React Native

83 lines 4.08 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.PutBucketPolicyCommand = void 0; const models_0_1 = require("../models/models_0"); const Aws_restXml_1 = require("../protocols/Aws_restXml"); const middleware_apply_body_checksum_1 = require("@aws-sdk/middleware-apply-body-checksum"); const middleware_bucket_endpoint_1 = require("@aws-sdk/middleware-bucket-endpoint"); const middleware_serde_1 = require("@aws-sdk/middleware-serde"); const smithy_client_1 = require("@aws-sdk/smithy-client"); /** * <p>Applies an Amazon S3 bucket policy to an Amazon S3 bucket. If you are using an identity other than * the root user of the AWS account that owns the bucket, the calling identity must have the * <code>PutBucketPolicy</code> permissions on the specified bucket and belong to the * bucket owner's account in order to use this operation.</p> * * <p>If you don't have <code>PutBucketPolicy</code> permissions, Amazon S3 returns a <code>403 * Access Denied</code> error. If you have the correct permissions, but you're not using an * identity that belongs to the bucket owner's account, Amazon S3 returns a <code>405 Method Not * Allowed</code> error.</p> * * <important> * <p> As a security precaution, the root user of the AWS account that owns a bucket can * always use this operation, even if the policy explicitly denies the root user the * ability to perform this action. </p> * </important> * * * <p>For more information about bucket policies, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/using-iam-policies.html">Using Bucket Policies and User * Policies</a>.</p> * * <p>The following operations are related to <code>PutBucketPolicy</code>:</p> * <ul> * <li> * <p> * <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html">CreateBucket</a> * </p> * </li> * <li> * <p> * <a href="https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html">DeleteBucket</a> * </p> * </li> * </ul> */ class PutBucketPolicyCommand extends smithy_client_1.Command { // Start section: command_properties // End section: command_properties constructor(input) { // Start section: command_constructor super(); this.input = input; // End section: command_constructor } /** * @internal */ resolveMiddleware(clientStack, configuration, options) { this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize)); this.middlewareStack.use(middleware_bucket_endpoint_1.getBucketEndpointPlugin(configuration)); this.middlewareStack.use(middleware_apply_body_checksum_1.getApplyMd5BodyChecksumPlugin(configuration)); const stack = clientStack.concat(this.middlewareStack); const { logger } = configuration; const clientName = "S3Client"; const commandName = "PutBucketPolicyCommand"; const handlerExecutionContext = { logger, clientName, commandName, inputFilterSensitiveLog: models_0_1.PutBucketPolicyRequest.filterSensitiveLog, outputFilterSensitiveLog: (output) => output, }; const { requestHandler } = configuration; return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext); } serialize(input, context) { return Aws_restXml_1.serializeAws_restXmlPutBucketPolicyCommand(input, context); } deserialize(output, context) { return Aws_restXml_1.deserializeAws_restXmlPutBucketPolicyCommand(output, context); } } exports.PutBucketPolicyCommand = PutBucketPolicyCommand; //# sourceMappingURL=PutBucketPolicyCommand.js.map