Re: [health@aws.com: [Action may be required] Amazon S3 to discontinue returning the Owner.DisplayName parameter effective November 21, 2025 [AWS Account: 379101102735]]
- To: Hector Oron <zumbi@debian.org>, debian-cloud@lists.debian.org
- Subject: Re: [health@aws.com: [Action may be required] Amazon S3 to discontinue returning the Owner.DisplayName parameter effective November 21, 2025 [AWS Account: 379101102735]]
- From: Andreas Tille <tille@debian.org>
- Date: Thu, 16 Oct 2025 09:23:25 +0200
- Message-id: <[🔎] aPCdbRu8EUe4aXXb@an3as.eu>
- In-reply-to: <CAODfWeHmAak2A9wJrcC6xw_dAeTc7t4shiw+5Zocr7-bUxbJMw@mail.gmail.com>
- References: <aO9PqF_MfoUS8m4A@an3as.eu> <CAODfWeHmAak2A9wJrcC6xw_dAeTc7t4shiw+5Zocr7-bUxbJMw@mail.gmail.com>
Hi,
Hector has pointed me to the cloud team. Is any service affected
by the change below?
Kind regards and thank you for maintaining the cloud infrastructure
Andreas.
Am Wed, Oct 15, 2025 at 10:52:49PM +0200 schrieb Hector Oron:
> Hello Andreas,
>
> El mié, 15 oct 2025, 9:39, Andreas Tille <tille@debian.org> escribió:
>
> > Hi,
> >
> > is any of our servers affected by this?
> >
>
> I believe cloud team owns the cloud Debian infrastructure by delegation.
> DSA would like to be able to run some services there, but resources hasn't
> been yet handed over to DSA (unless I am mistaken and/or outdated).
>
> Regards
>
> Héctor Orón -.. . -... .. .- -. -.. . ...- . .-.. --- .--. . .-.
>
>
> >
> > Kind regards
> > Andreas.
> >
> > ----- Weitergeleitete Nachricht von Amazon Web Services <health@aws.com>
> > -----
> >
> > Date: Wed, 15 Oct 2025 05:44:01 +0000
> > From: Amazon Web Services <health@aws.com>
> > To: leader@debian.org
> > Subject: [Action may be required] Amazon S3 to discontinue returning the
> > Owner.DisplayName parameter effective November 21, 2025 [AWS Account:
> > 379101102735]
> >
> > AWS Health Event
> >
> > [aws_sm]
> > View
> > in Notification Center
> > [Action may be required] Amazon S3 to discontinue returning the
> > Owner.DisplayName parameter effective November 21, 2025 [AWS Account:
> > 379101102735]
> > View details in service console
> > Hello,
> >
> > On November 21, 2025, Amazon Simple Storage Service (Amazon S3) will stop
> > returning Owner.DisplayName for all request responses. Owner.DisplayName
> > is a
> > legacy field that most modern applications do not rely on as it has been
> > superseded by AWS Account IDs and IAM ARNs. Until November 21, 2025, S3
> > will
> > progressively remove this field from request responses. After this date,
> > Owner.DisplayName will not be returned for any requests made to Amazon S3.
> >
> > The Owner.DisplayName parameter is supported only in eight AWS Regions on
> > the
> > Amazon S3 APIs listed below under recommended actions. If you have
> > applications
> > that rely on this behavior to validate ownership of objects, we recommend
> > using
> > canonical IDs (unique identifier for AWS accounts), AWS account ID (12
> > digit
> > identifier) or IAM ARNs (full resource naming) as a direct replacement of
> > Owner.DisplayName.
> >
> > This change affects the following AWS Regions: US-EAST-1 Region, US-WEST-1
> > Region, US-WEST-2 Region, AP-SOUTHEAST-1 Region, AP-SOUTHEAST-2 Region,
> > AP-NORTHEAST-1 Region, EU-WEST-1 Region, and SA-EAST-1 Region.
> >
> > This is also communicated in S3 documentation [1].
> >
> > Important Dates:
> >
> > * From now until November 21, 2025: S3 will gradually stop returning the
> > Owner.DisplayName.
> > * Beginning November 21, 2025: Owner.DisplayName will not be returned
> > across
> > all requests to Amazon S3 in any AWS region.
> >
> > Recommended Actions:
> >
> > 1. Review the following APIs that return Owner.DisplayName attribute as
> > part of
> > the response and ensure users completely remove any references:
> >
> > REST.GET.ACL - GetBucketAcl, GetObjectAcl
> > REST.GET.BUCKET - ListObjects, ListObjectsV2
> > REST.GET.BUCKETVERSIONS - ListObjectVersions
> > REST.GET.LOGGING_STATUS - GetBucketLogging
> > REST.GET.SERVICE - ListBuckets
> > REST.GET.UPLOAD - ListParts
> > REST.GET.UPLOADS - ListMultipartUploads
> >
> > 2. Update applications to use canonical IDs instead of Owner.DisplayName
> > attribute.
> > 3. Implement proper error handling for missing Owner.DisplayName attribute
> > [2]
> > 4. Test applications with Owner.DisplayName attribute removed from
> > responses.
> > 5. Validate owner identification using canonical IDs.
> > 6. Review and update your runbooks and applications that reference
> > Owner.DisplayName attribute.
> >
> > If you have any questions or concerns, please reach out to AWS Support [3].
> >
> > [1] https://docs.aws.amazon.com/AmazonS3/latest/API/API_Owner.html
> > [2] https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html
> > [3] https://aws.amazon.com/support
> >
> >
> >
> > ---
> > Reference: https://health.aws.amazon.com/health/home?region=us-east-1#/
> > event-log?eventID=arn:aws:health:global::event/S3/
> > <https://health.aws.amazon.com/health/home?region=us-east-1#/event-log?eventID=arn:aws:health:global::event/S3/>
> > AWS_S3_PLANNED_LIFECYCLE_EVENT/
> >
> > AWS_S3_PLANNED_LIFECYCLE_EVENT_5ccdb1e1e0c55f7484a361f882a5d5747b6ea3b07521c39eb36239339d649c4d
> > &eventTab=details
> > Message metadata
> > Affected account
> >
> > 379101102735
> >
> > Event type code
> >
> > AWS_S3_PLANNED_LIFECYCLE_EVENT
> >
> > Event region
> >
> > us-east-1
> >
> > Service
> >
> > S3
> >
> > Event type category
> >
> > scheduledChange
> >
> > Start time
> >
> > Fri, 21 Nov 2025 07:00:00 GMT
> >
> > AWS managed notification details
> > AWS Health: Operations events notifications are generated by AWS and sent
> > to
> > selected account contacts. You can add additional delivery channels for
> > these
> > notifications using AWS managed notifications subscriptions.
> > Event type
> >
> > AWS Health Event
> >
> > Category
> >
> > Operations
> >
> > Thank you,
> > Amazon Web Services
> > You are receiving this email because leader@debian.org is subscribed to
> > AWS
> > Health: Operations events notifications. If you do not wish to receive
> > emails
> > for these AWS managed notifications, you may unsubscribe. If you believe
> > you've
> > received this email by error or are experiencing issues managing email
> > subscription, please contact us. Amazon Web Services, Inc. is a subsidiary
> > of
> > Amazon.com, Inc. AMAZON WEB SERVICES AWS, and related logos are trademarks
> > of
> > Amazon Web Services, Inc. or its affiliates. This message was produced and
> > distributed by Amazon Web Services, Inc. or its affiliates 410 Terry Ave.
> > North, Seattle, WA 98109. © 2025, Amazon Web Services, Inc. or its
> > affiliates.
> > All rights reserved. Read our Privacy Notice.
> > [tLk6VgCaMT]
> >
> > ----- Ende weitergeleitete Nachricht -----
> >
> > --
> > https://fam-tille.de
> >
--
https://fam-tille.de
Reply to: