aws.s3.getObject
Explore with Pulumi AI
The S3 object data source allows access to the metadata and optionally (see below) content of an object stored inside S3 bucket.
Note: The content of an object (
bodyfield) is available only for objects which have a human-readableContent-Type:
text/*application/jsonapplication/ld+jsonapplication/x-httpd-phpapplication/xhtml+xmlapplication/x-cshapplication/x-shapplication/xmlapplication/atom+xmlapplication/x-sqlapplication/yaml
This is to prevent printing unsafe characters and potentially downloading large amount of data which would be thrown away in favor of metadata.
Example Usage
The following example retrieves a text object (which must have a Content-Type
value starting with text/) and uses it as the user_data for an EC2 instance:
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const bootstrapScript = aws.s3.getObject({
    bucket: "ourcorp-deploy-config",
    key: "ec2-bootstrap-script.sh",
});
const example = new aws.ec2.Instance("example", {
    instanceType: aws.ec2.InstanceType.T2_Micro,
    ami: "ami-2757f631",
    userData: bootstrapScript.then(bootstrapScript => bootstrapScript.body),
});
import pulumi
import pulumi_aws as aws
bootstrap_script = aws.s3.get_object(bucket="ourcorp-deploy-config",
    key="ec2-bootstrap-script.sh")
example = aws.ec2.Instance("example",
    instance_type=aws.ec2.InstanceType.T2_MICRO,
    ami="ami-2757f631",
    user_data=bootstrap_script.body)
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ec2"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/s3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		bootstrapScript, err := s3.GetObject(ctx, &s3.GetObjectArgs{
			Bucket: "ourcorp-deploy-config",
			Key:    "ec2-bootstrap-script.sh",
		}, nil)
		if err != nil {
			return err
		}
		_, err = ec2.NewInstance(ctx, "example", &ec2.InstanceArgs{
			InstanceType: pulumi.String(ec2.InstanceType_T2_Micro),
			Ami:          pulumi.String("ami-2757f631"),
			UserData:     pulumi.String(bootstrapScript.Body),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() => 
{
    var bootstrapScript = Aws.S3.GetObject.Invoke(new()
    {
        Bucket = "ourcorp-deploy-config",
        Key = "ec2-bootstrap-script.sh",
    });
    var example = new Aws.Ec2.Instance("example", new()
    {
        InstanceType = Aws.Ec2.InstanceType.T2_Micro,
        Ami = "ami-2757f631",
        UserData = bootstrapScript.Apply(getObjectResult => getObjectResult.Body),
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.s3.S3Functions;
import com.pulumi.aws.s3.inputs.GetObjectArgs;
import com.pulumi.aws.ec2.Instance;
import com.pulumi.aws.ec2.InstanceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var bootstrapScript = S3Functions.getObject(GetObjectArgs.builder()
            .bucket("ourcorp-deploy-config")
            .key("ec2-bootstrap-script.sh")
            .build());
        var example = new Instance("example", InstanceArgs.builder()
            .instanceType("t2.micro")
            .ami("ami-2757f631")
            .userData(bootstrapScript.body())
            .build());
    }
}
resources:
  example:
    type: aws:ec2:Instance
    properties:
      instanceType: t2.micro
      ami: ami-2757f631
      userData: ${bootstrapScript.body}
variables:
  bootstrapScript:
    fn::invoke:
      function: aws:s3:getObject
      arguments:
        bucket: ourcorp-deploy-config
        key: ec2-bootstrap-script.sh
The following, more-complex example retrieves only the metadata for a zip
file stored in S3, which is then used to pass the most recent version_id
to AWS Lambda for use as a function implementation. More information about
Lambda functions is available in the documentation for
aws.lambda.Function.
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const lambda = aws.s3.getObject({
    bucket: "ourcorp-lambda-functions",
    key: "hello-world.zip",
});
const testLambda = new aws.lambda.Function("test_lambda", {
    s3Bucket: lambda.then(lambda => lambda.bucket),
    s3Key: lambda.then(lambda => lambda.key),
    s3ObjectVersion: lambda.then(lambda => lambda.versionId),
    name: "lambda_function_name",
    role: iamForLambda.arn,
    handler: "exports.test",
});
import pulumi
import pulumi_aws as aws
lambda_ = aws.s3.get_object(bucket="ourcorp-lambda-functions",
    key="hello-world.zip")
test_lambda = aws.lambda_.Function("test_lambda",
    s3_bucket=lambda_.bucket,
    s3_key=lambda_.key,
    s3_object_version=lambda_.version_id,
    name="lambda_function_name",
    role=iam_for_lambda["arn"],
    handler="exports.test")
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/lambda"
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/s3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		lambda, err := s3.GetObject(ctx, &s3.GetObjectArgs{
			Bucket: "ourcorp-lambda-functions",
			Key:    "hello-world.zip",
		}, nil)
		if err != nil {
			return err
		}
		_, err = lambda.NewFunction(ctx, "test_lambda", &lambda.FunctionArgs{
			S3Bucket:        pulumi.String(lambda.Bucket),
			S3Key:           pulumi.String(lambda.Key),
			S3ObjectVersion: pulumi.String(lambda.VersionId),
			Name:            pulumi.String("lambda_function_name"),
			Role:            pulumi.Any(iamForLambda.Arn),
			Handler:         pulumi.String("exports.test"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() => 
{
    var lambda = Aws.S3.GetObject.Invoke(new()
    {
        Bucket = "ourcorp-lambda-functions",
        Key = "hello-world.zip",
    });
    var testLambda = new Aws.Lambda.Function("test_lambda", new()
    {
        S3Bucket = lambda.Apply(getObjectResult => getObjectResult.Bucket),
        S3Key = lambda.Apply(getObjectResult => getObjectResult.Key),
        S3ObjectVersion = lambda.Apply(getObjectResult => getObjectResult.VersionId),
        Name = "lambda_function_name",
        Role = iamForLambda.Arn,
        Handler = "exports.test",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.s3.S3Functions;
import com.pulumi.aws.s3.inputs.GetObjectArgs;
import com.pulumi.aws.lambda.Function;
import com.pulumi.aws.lambda.FunctionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var lambda = S3Functions.getObject(GetObjectArgs.builder()
            .bucket("ourcorp-lambda-functions")
            .key("hello-world.zip")
            .build());
        var testLambda = new Function("testLambda", FunctionArgs.builder()
            .s3Bucket(lambda.bucket())
            .s3Key(lambda.key())
            .s3ObjectVersion(lambda.versionId())
            .name("lambda_function_name")
            .role(iamForLambda.arn())
            .handler("exports.test")
            .build());
    }
}
resources:
  testLambda:
    type: aws:lambda:Function
    name: test_lambda
    properties:
      s3Bucket: ${lambda.bucket}
      s3Key: ${lambda.key}
      s3ObjectVersion: ${lambda.versionId}
      name: lambda_function_name
      role: ${iamForLambda.arn}
      handler: exports.test
variables:
  lambda:
    fn::invoke:
      function: aws:s3:getObject
      arguments:
        bucket: ourcorp-lambda-functions
        key: hello-world.zip
Using getObject
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getObject(args: GetObjectArgs, opts?: InvokeOptions): Promise<GetObjectResult>
function getObjectOutput(args: GetObjectOutputArgs, opts?: InvokeOptions): Output<GetObjectResult>def get_object(bucket: Optional[str] = None,
               checksum_mode: Optional[str] = None,
               key: Optional[str] = None,
               range: Optional[str] = None,
               tags: Optional[Mapping[str, str]] = None,
               version_id: Optional[str] = None,
               opts: Optional[InvokeOptions] = None) -> GetObjectResult
def get_object_output(bucket: Optional[pulumi.Input[str]] = None,
               checksum_mode: Optional[pulumi.Input[str]] = None,
               key: Optional[pulumi.Input[str]] = None,
               range: Optional[pulumi.Input[str]] = None,
               tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
               version_id: Optional[pulumi.Input[str]] = None,
               opts: Optional[InvokeOptions] = None) -> Output[GetObjectResult]func GetObject(ctx *Context, args *GetObjectArgs, opts ...InvokeOption) (*GetObjectResult, error)
func GetObjectOutput(ctx *Context, args *GetObjectOutputArgs, opts ...InvokeOption) GetObjectResultOutput> Note: This function is named GetObject in the Go SDK.
public static class GetObject 
{
    public static Task<GetObjectResult> InvokeAsync(GetObjectArgs args, InvokeOptions? opts = null)
    public static Output<GetObjectResult> Invoke(GetObjectInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetObjectResult> getObject(GetObjectArgs args, InvokeOptions options)
public static Output<GetObjectResult> getObject(GetObjectArgs args, InvokeOptions options)
fn::invoke:
  function: aws:s3/getObject:getObject
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Bucket string
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - Key string
 - Full path to the object inside the bucket
 - Checksum
Mode string - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - Range string
 - Dictionary<string, string>
 - Map of tags assigned to the object.
 - Version
Id string - Specific version ID of the object returned (defaults to latest version)
 
- Bucket string
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - Key string
 - Full path to the object inside the bucket
 - Checksum
Mode string - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - Range string
 - map[string]string
 - Map of tags assigned to the object.
 - Version
Id string - Specific version ID of the object returned (defaults to latest version)
 
- bucket String
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - key String
 - Full path to the object inside the bucket
 - checksum
Mode String - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - range String
 - Map<String,String>
 - Map of tags assigned to the object.
 - version
Id String - Specific version ID of the object returned (defaults to latest version)
 
- bucket string
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - key string
 - Full path to the object inside the bucket
 - checksum
Mode string - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - range string
 - {[key: string]: string}
 - Map of tags assigned to the object.
 - version
Id string - Specific version ID of the object returned (defaults to latest version)
 
- bucket str
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - key str
 - Full path to the object inside the bucket
 - checksum_
mode str - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - range str
 - Mapping[str, str]
 - Map of tags assigned to the object.
 - version_
id str - Specific version ID of the object returned (defaults to latest version)
 
- bucket String
 - Name of the bucket to read the object from. Alternatively, an S3 access point ARN can be specified
 - key String
 - Full path to the object inside the bucket
 - checksum
Mode String - To retrieve the object's checksum, this argument must be 
ENABLED. If you enablechecksum_modeand the object is encrypted with KMS, you must have permission to use thekms:Decryptaction. Valid values:ENABLED - range String
 - Map<String>
 - Map of tags assigned to the object.
 - version
Id String - Specific version ID of the object returned (defaults to latest version)
 
getObject Result
The following output properties are available:
- Arn string
 - ARN of the object.
 - Body string
 - Object data (see limitations above to understand cases in which this field is actually available)
 - Bucket string
 - Bucket
Key boolEnabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - Cache
Control string - Caching behavior along the request/reply chain.
 - Checksum
Crc32 string - The base64-encoded, 32-bit CRC32 checksum of the object.
 - Checksum
Crc32c string - The base64-encoded, 32-bit CRC32C checksum of the object.
 - Checksum
Crc64nvme string - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - Checksum
Sha1 string - The base64-encoded, 160-bit SHA-1 digest of the object.
 - Checksum
Sha256 string - The base64-encoded, 256-bit SHA-256 digest of the object.
 - Content
Disposition string - Presentational information for the object.
 - Content
Encoding string - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - Content
Language string - Language the content is in.
 - Content
Length int - Size of the body in bytes.
 - Content
Type string - Standard MIME type describing the format of the object data.
 - Etag string
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - Expiration string
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - Expires string
 - Date and time at which the object is no longer cacheable.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Key string
 - Last
Modified string - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - Metadata Dictionary<string, string>
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - Object
Lock stringLegal Hold Status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - Object
Lock stringMode  - Object lock retention mode currently in place for this object.
 - Object
Lock stringRetain Until Date  - The date and time when this object's object lock will expire.
 - Server
Side stringEncryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - Sse
Kms stringKey Id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - Storage
Class string - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - Dictionary<string, string>
 - Map of tags assigned to the object.
 - Version
Id string - Latest version ID of the object returned.
 - Website
Redirect stringLocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - Checksum
Mode string - Range string
 
- Arn string
 - ARN of the object.
 - Body string
 - Object data (see limitations above to understand cases in which this field is actually available)
 - Bucket string
 - Bucket
Key boolEnabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - Cache
Control string - Caching behavior along the request/reply chain.
 - Checksum
Crc32 string - The base64-encoded, 32-bit CRC32 checksum of the object.
 - Checksum
Crc32c string - The base64-encoded, 32-bit CRC32C checksum of the object.
 - Checksum
Crc64nvme string - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - Checksum
Sha1 string - The base64-encoded, 160-bit SHA-1 digest of the object.
 - Checksum
Sha256 string - The base64-encoded, 256-bit SHA-256 digest of the object.
 - Content
Disposition string - Presentational information for the object.
 - Content
Encoding string - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - Content
Language string - Language the content is in.
 - Content
Length int - Size of the body in bytes.
 - Content
Type string - Standard MIME type describing the format of the object data.
 - Etag string
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - Expiration string
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - Expires string
 - Date and time at which the object is no longer cacheable.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Key string
 - Last
Modified string - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - Metadata map[string]string
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - Object
Lock stringLegal Hold Status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - Object
Lock stringMode  - Object lock retention mode currently in place for this object.
 - Object
Lock stringRetain Until Date  - The date and time when this object's object lock will expire.
 - Server
Side stringEncryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - Sse
Kms stringKey Id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - Storage
Class string - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - map[string]string
 - Map of tags assigned to the object.
 - Version
Id string - Latest version ID of the object returned.
 - Website
Redirect stringLocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - Checksum
Mode string - Range string
 
- arn String
 - ARN of the object.
 - body String
 - Object data (see limitations above to understand cases in which this field is actually available)
 - bucket String
 - bucket
Key BooleanEnabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - cache
Control String - Caching behavior along the request/reply chain.
 - checksum
Crc32 String - The base64-encoded, 32-bit CRC32 checksum of the object.
 - checksum
Crc32c String - The base64-encoded, 32-bit CRC32C checksum of the object.
 - checksum
Crc64nvme String - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - checksum
Sha1 String - The base64-encoded, 160-bit SHA-1 digest of the object.
 - checksum
Sha256 String - The base64-encoded, 256-bit SHA-256 digest of the object.
 - content
Disposition String - Presentational information for the object.
 - content
Encoding String - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - content
Language String - Language the content is in.
 - content
Length Integer - Size of the body in bytes.
 - content
Type String - Standard MIME type describing the format of the object data.
 - etag String
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - expiration String
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - expires String
 - Date and time at which the object is no longer cacheable.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - key String
 - last
Modified String - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - metadata Map<String,String>
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - object
Lock StringLegal Hold Status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - object
Lock StringMode  - Object lock retention mode currently in place for this object.
 - object
Lock StringRetain Until Date  - The date and time when this object's object lock will expire.
 - server
Side StringEncryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - sse
Kms StringKey Id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - storage
Class String - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - Map<String,String>
 - Map of tags assigned to the object.
 - version
Id String - Latest version ID of the object returned.
 - website
Redirect StringLocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - checksum
Mode String - range String
 
- arn string
 - ARN of the object.
 - body string
 - Object data (see limitations above to understand cases in which this field is actually available)
 - bucket string
 - bucket
Key booleanEnabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - cache
Control string - Caching behavior along the request/reply chain.
 - checksum
Crc32 string - The base64-encoded, 32-bit CRC32 checksum of the object.
 - checksum
Crc32c string - The base64-encoded, 32-bit CRC32C checksum of the object.
 - checksum
Crc64nvme string - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - checksum
Sha1 string - The base64-encoded, 160-bit SHA-1 digest of the object.
 - checksum
Sha256 string - The base64-encoded, 256-bit SHA-256 digest of the object.
 - content
Disposition string - Presentational information for the object.
 - content
Encoding string - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - content
Language string - Language the content is in.
 - content
Length number - Size of the body in bytes.
 - content
Type string - Standard MIME type describing the format of the object data.
 - etag string
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - expiration string
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - expires string
 - Date and time at which the object is no longer cacheable.
 - id string
 - The provider-assigned unique ID for this managed resource.
 - key string
 - last
Modified string - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - metadata {[key: string]: string}
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - object
Lock stringLegal Hold Status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - object
Lock stringMode  - Object lock retention mode currently in place for this object.
 - object
Lock stringRetain Until Date  - The date and time when this object's object lock will expire.
 - server
Side stringEncryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - sse
Kms stringKey Id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - storage
Class string - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - {[key: string]: string}
 - Map of tags assigned to the object.
 - version
Id string - Latest version ID of the object returned.
 - website
Redirect stringLocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - checksum
Mode string - range string
 
- arn str
 - ARN of the object.
 - body str
 - Object data (see limitations above to understand cases in which this field is actually available)
 - bucket str
 - bucket_
key_ boolenabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - cache_
control str - Caching behavior along the request/reply chain.
 - checksum_
crc32 str - The base64-encoded, 32-bit CRC32 checksum of the object.
 - checksum_
crc32c str - The base64-encoded, 32-bit CRC32C checksum of the object.
 - checksum_
crc64nvme str - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - checksum_
sha1 str - The base64-encoded, 160-bit SHA-1 digest of the object.
 - checksum_
sha256 str - The base64-encoded, 256-bit SHA-256 digest of the object.
 - content_
disposition str - Presentational information for the object.
 - content_
encoding str - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - content_
language str - Language the content is in.
 - content_
length int - Size of the body in bytes.
 - content_
type str - Standard MIME type describing the format of the object data.
 - etag str
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - expiration str
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - expires str
 - Date and time at which the object is no longer cacheable.
 - id str
 - The provider-assigned unique ID for this managed resource.
 - key str
 - last_
modified str - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - metadata Mapping[str, str]
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - object_
lock_ strlegal_ hold_ status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - object_
lock_ strmode  - Object lock retention mode currently in place for this object.
 - object_
lock_ strretain_ until_ date  - The date and time when this object's object lock will expire.
 - server_
side_ strencryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - sse_
kms_ strkey_ id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - storage_
class str - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - Mapping[str, str]
 - Map of tags assigned to the object.
 - version_
id str - Latest version ID of the object returned.
 - website_
redirect_ strlocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - checksum_
mode str - range str
 
- arn String
 - ARN of the object.
 - body String
 - Object data (see limitations above to understand cases in which this field is actually available)
 - bucket String
 - bucket
Key BooleanEnabled  - (Optional) Whether or not to use Amazon S3 Bucket Keys for SSE-KMS.
 - cache
Control String - Caching behavior along the request/reply chain.
 - checksum
Crc32 String - The base64-encoded, 32-bit CRC32 checksum of the object.
 - checksum
Crc32c String - The base64-encoded, 32-bit CRC32C checksum of the object.
 - checksum
Crc64nvme String - The base64-encoded, 64-bit CRC64NVME checksum of the object.
 - checksum
Sha1 String - The base64-encoded, 160-bit SHA-1 digest of the object.
 - checksum
Sha256 String - The base64-encoded, 256-bit SHA-256 digest of the object.
 - content
Disposition String - Presentational information for the object.
 - content
Encoding String - What content encodings have been applied to the object and thus what decoding mechanisms must be applied to obtain the media-type referenced by the Content-Type header field.
 - content
Language String - Language the content is in.
 - content
Length Number - Size of the body in bytes.
 - content
Type String - Standard MIME type describing the format of the object data.
 - etag String
 - ETag generated for the object (an MD5 sum of the object content in case it's not encrypted)
 - expiration String
 - If the object expiration is configured (see object lifecycle management), the field includes this header. It includes the expiry-date and rule-id key value pairs providing object expiration information. The value of the rule-id is URL encoded.
 - expires String
 - Date and time at which the object is no longer cacheable.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - key String
 - last
Modified String - Last modified date of the object in RFC1123 format (e.g., 
Mon, 02 Jan 2006 15:04:05 MST) - metadata Map<String>
 - Map of metadata stored with the object in S3. Keys are always returned in lowercase.
 - object
Lock StringLegal Hold Status  - Indicates whether this object has an active legal hold. This field is only returned if you have permission to view an object's legal hold status.
 - object
Lock StringMode  - Object lock retention mode currently in place for this object.
 - object
Lock StringRetain Until Date  - The date and time when this object's object lock will expire.
 - server
Side StringEncryption  - If the object is stored using server-side encryption (KMS or Amazon S3-managed encryption key), this field includes the chosen encryption and algorithm used.
 - sse
Kms StringKey Id  - If present, specifies the ID of the Key Management Service (KMS) master encryption key that was used for the object.
 - storage
Class String - Storage class information of the object. Available for all objects except for 
Standardstorage class objects. - Map<String>
 - Map of tags assigned to the object.
 - version
Id String - Latest version ID of the object returned.
 - website
Redirect StringLocation  - If the bucket is configured as a website, redirects requests for this object to another object in the same bucket or to an external URL. Amazon S3 stores the value of this header in the object metadata.
 - checksum
Mode String - range String
 
Package Details
- Repository
 - AWS Classic pulumi/pulumi-aws
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
awsTerraform Provider.