Clarification on S3 API

[tzmanlfg]

Hoping to get some clarification on the S3 SDK v3
The PutObjectCommandInput contains an element ExpectedBucketOwner, but the documentation is not clear on its usage.
The account ID of the expected bucket owner. If the bucket is owned by a different account, the request will fail with an HTTP 403 (Access Denied) error.

Can anyone explain what this is does and the use cases in which it should be used?

Thanks for the clarification

[RanVaknin]

Hi @tzmanlfg!

When you upload an object to an S3 bucket you may want to verify that the bucket to which you are uploading is actually the intended bucket. This may come in handy as a 'self check' when you are writing to multiple buckets owned by different accounts.

You can do so by passing in an ExpectedBucketOwner in the form of the intended owner id, thus making sure your object ends up where it was intended to go. If there is a discrepancy between the intended destination and the actual destination, the request will fail with a 403 error.

Here is an official doc describing what Ive just explained with a real life example.

Please let me know if this answers your question.
Cheers!

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.