You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Consider adding client-config level disable_payload_signing for S3 #1441
Since this is an advanced option, it currently only applies to PutObject and UploadPart for S3, and requires per-operation customization:
client
.put_object()// ... other configs.customize().disable_payload_signing().send().await;
Ask
Make disable_payload_signing available on the S3 client config builder, so customers don't need to customize each operation call individually.
Notes
For PutObject and UploadPart with a streaming body, calling disable_payload_signing is unnecessary; aws-chunked encoding kicks in by default, which already disables payload signing under the hood.
Use Case
With the request implemented, no per-operation customization needed:
let config = aws_sdk_s3::Config::builder()
.disable_payload_signing()
// ... other configs
.build();
let client = aws_sdk_s3::Client::from_conf(config);
client
.put_object()
.bucket("my-bucket")
.key("my-key")
.body(body)
.send()
.await?;
Proposed Solution
No response
Other Information
No response
Acknowledgements
I may be able to implement this feature request
This feature might incur a breaking change
A note for the community
Community Note
Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
If you are interested in working on this issue, please leave a comment
Would a client-level setting act as a default that per-operation customization can explicitly override? That precedence matters for applications sharing one client but requiring signed payloads for selected requests. It may also be worth rejecting or ignoring the option when TLS is not in use, so moving an endpoint from HTTPS to HTTP cannot silently weaken signing.
Activity
hiSandog commentedon Jul 11, 2026
Would a client-level setting act as a default that per-operation customization can explicitly override? That precedence matters for applications sharing one client but requiring signed payloads for selected requests. It may also be worth rejecting or ignoring the option when TLS is not in use, so moving an endpoint from HTTPS to HTTP cannot silently weaken signing.