Only add encryption headers for for SSE-C in get. (apache#6260)

ShiKaiWi · Aug 20, 2024 · 23b6ff9 · 23b6ff9
1 parent 344ba1d
commit 23b6ff9
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/object_store/src/aws/client.rs b/object_store/src/aws/client.rs
@@ -705,7 +705,14 @@ impl GetClient for S3Client {
         };
 
         let mut builder = self.client.request(method, url);
-        builder = builder.headers(self.config.encryption_headers.clone().into());
+        if self
+            .config
+            .encryption_headers
+            .0
+            .contains_key("x-amz-server-side-encryption-customer-algorithm")
+        {
+            builder = builder.headers(self.config.encryption_headers.clone().into());
+        }
 
         if let Some(v) = &options.version {
             builder = builder.query(&[("versionId", v)])