S3 Express One Zone session authentication

S3 Express One Zone is Amazon S3's high-performance storage class that provides single-digit millisecond latency for frequently accessed data. When you use S3 Express One Zone buckets, Amazon SDKs and tools automatically use session-based authentication that is optimized for low-latency authorization of data requests. You use session tokens with Zonal (object-level) operations to distribute the latency that's associated with authorization over a number of requests in a session, reducing the authentication overhead and improving overall request performance.

S3 Express One Zone buckets use a specific naming format that includes the Availability Zone ID, such as bucket-name--usw2-az1--x-s3. When the SDK detects this naming pattern, it automatically routes requests to the appropriate S3 Express One Zone endpoints and applies the optimized authentication flow. The session authentication creates temporary, bucket-specific credentials that provide low-latency access to your bucket and are cached and refreshed automatically by the SDK. See S3 Express One Zone in the Amazon S3 User Guide to learn more.

By default, session authentication is enabled for S3 Express One Zone buckets.

Example of setting this value in the config file:

[default]
s3_disable_express_session_auth=true

Linux/macOS example of setting environment variables via command line:

export AWS_S3_DISABLE_EXPRESS_SESSION_AUTH=true

Windows example of setting environment variables via command line:

setx AWS_S3_DISABLE_EXPRESS_SESSION_AUTH true

Support by Amazon SDKs and tools

The following SDKs support the features and settings described in this topic. Any partial exceptions are noted. Any JVM system property settings are supported by the Amazon SDK for Java and the Amazon SDK for Kotlin only.