ministackorg/ministack v1.3.48 on GitHub

What's Changed

S3 GetObjectAcl and PutObjectAcl — both ?acl subresource operations are now implemented. GetObjectAcl returns the stored policy or, if none has been set, the AWS default of a single FULL_CONTROL Grant to the request's account-id owner. PutObjectAcl accepts either a canned ACL via the x-amz-acl header (private, public-read, public-read-write, authenticated-read, aws-exec-read, bucket-owner-read, bucket-owner-full-control) or a full <AccessControlPolicy> XML body; invalid canned values return InvalidArgument and malformed bodies return MalformedACLError. As with retention, legal-hold and bucket policies, the policy is stored and round-tripped but not enforced on the data plane. NoSuchKey returned for missing keys, matching the only error modeled in botocore. Reported by @smpial.

RDS persistence-restore module-import race — the v1.3.47 restore-respawn threads called _get_docker() which was defined further down in the same module, so a thread reaching the lookup before the parser finished raised NameError: name '_get_docker' is not defined and stranded the restored instance in creating. The load_state("rds") block now runs at the bottom of the module, after every helper the restore threads can touch. Reported by @doodaz.