Amazon S3 Connector Release Notes

These libraries are upgraded to address reported security vulnerabilities:

W-24259548, W-3300013

The connector no longer leaks AWS resources when an Amazon S3 connection is invalidated, the application is redeployed, or the configuration is reloaded. On long-running deployments, and on IRSA or EKS Web Identity workloads, credential resolution no longer degrades until the Mule worker is restarted.

W-23993014

The Get Object operation no longer logs Broken pipe warnings or stalls the application when a flow reads only object attributes and does not consume the payload.

W-24187876

These libraries are upgraded to address reported security vulnerabilities:

W-23441606

S3:UNAUTHORIZED errors and NoClassDefFoundError: jdk/net/Sockets exceptions no longer occur on CloudHub 2.0 with Java 17 when using role-based IAM authentication. Apache HttpClient 4 is now restored as the default synchronous HTTP client.

W-23468996

The Put Object operation no longer fails intermittently with an S3:REQUEST_TIMEOUT error when the request payload is a deferred DataWeave value.

W-23406817

These libraries are upgraded:

W-3300013

The Select Object Content operation now correctly refreshes role-based credentials and retries the request upon STS session token expiry, and no longer fails with the S3:BAD_REQUEST error. The connector also no longer leaks temporary files and file descriptors on failed requests, which previously could cause resource exhaustion.

W-23168925

These libraries are upgraded to address reported security vulnerabilities:

W-23168925

These libraries are upgraded to address reported security vulnerabilities:

W-22899430, W-22943408

The Head Object operation now correctly refreshes role-based credentials upon session token expiry. Previously, because Amazon S3 returns a body-less HTTP 400 Bad Request response for HEAD operations, the connector failed to recognize the token expiry, causing subsequent Head Object operations to continuously fail until a different operation triggered a refresh.

W-20190508

The connector now provides diagnostic logs for the credential refresh path and asynchronous execution paths. These logs allow you to monitor latency and retry behavior during security token updates in production environments.

W-18826515

The Get Object operation now prevents file descriptor leaks when Amazon S3 returns 404 (NoSuchKey) error responses. This fix ensures that resources are properly released during exception handling, preventing java.io.IOException: Too many open files errors under high request volumes.

W-21349199

The tooltip for the User metadatas field in the Put Object operation is now updated to clarify that the input for this field in Expression mode supports only inline DataWeave scripts and doesn’t support structured or multiline DataWeave scripts, because they cause XML parsing errors during deployment.

W-20954680

The AWS SDK version is upgraded to 2.41.10.

W-20954680

These libraries are upgraded to address reported security vulnerabilities:

W-20170183

The List Multipart Parts operation response now includes the new E Tag and Last Modified fields, which return their respective values.

W-19455506

In the List Objects operation, the Owner field now returns the owner details instead of null.

W-17974123

The Create Object Presigned Url operation now refreshes the token correctly before generating the presigned URL.

W-18232212

The Put Object operation now uploads the full payload with streaming on.

W-18313462

The AWS SDK is now upgraded to version 2.31.16.

W-18242119

Attributes from the model objects are now accessible in DataWeave expressions when running on Java 17.

W-17964937

The connector no longer throws a Read end dead error when downloading a large file or object.

W-17587788

The Copy Object operation now contains the new Server Side Encryption, Sse Customer Key, Sse Kms Key Id, Sse Customer Key MD5, and Sse Customer Algorithm fields.

W-17036072

The f(x) function for the ARN and External ID fields in the Role configuration is now available.

W-17335242

Attributes from the response objects are now accessible in DataWeave expressions when running on Java 17.

W-17338643

Amazon S3 Connector now works correctly after the Mule app sits idle for a period of time on a 0.1 vCore machine on CloudHub 2.0.

W-16921672

The Amazon S3 token refresh now works as expected and the requests are no longer stuck.

W-16612349

The connector now has the correct default SQS queue naming.

W-14549491

The connector performance is now improved for low-core machines.

W-16048632

You can now create a Role-based connection with tags.

W-16468150

All operations that use buckets now throw the NO_SUCH_BUCKET error when specifying a bucket that doesn’t exist.

W-14025894, W-15309594

The Get Object operation response is now serialized.

W-15106813

The ContentEncoding is now properly injected into the PUT object.

W-16109941

The Copy Object operation no longer faces metadata update issues.

W-15933607

The connector now uses a custom AWS async thread pool to scale up and down dynamically based on the load.

W-15310212

The connector now supports Content-MD5 and Content-Type headers for creating presigned URLs.

W-15549086

The connector now supports configuring maximum connections for S3 connection.

W-15859450

The token refresh now works correctly.

W-15689287

Old Netty dependencies are excluded to address the CVE-2023-44487(7.5) and CVE-2022-41881(7.5) reported security vulnerabilities.

W-14756310

The connector now handles the exception The provided token is malformed or otherwise invalid and attempts to reconnect to the service.

W-14414108

The Netty dependencies are upgraded to version 4.1.100.Final to address reported security vulnerabilities.

W-14625053

The Get Object operation now returns response attributes.

W-14006215

Internal dependencies are upgraded.

W-14547619

The connector now handles the invalid token exception correctly.

W-14414108

The Put Object operation now uploads empty files or content with zero bytes.

W-13942501

The connector now handles the invalid token exception correctly.

W-14033096

The Select Object Content operation now works correctly when the JSON field is empty.

W-12108071

The Put Object operation now contains the new Server Side Encryption and Sse Kms Key Id fields.

W-13514438

The Upload part operation now uploads a part in a multipart upload correctly.

W-13533222

Upgraded the Jackson Core library from com.fasterxml.jackson.core:jackson-core:2.14.1 to com.fasterxml.jackson.core:jackson-core:2.15.0.

W-12665857

Upgraded the Netty Codec library from io.netty:netty-codec:4.1.72.Final to io.netty:netty-codec:4.1.92.Final.

W-12665444

Amazon S3 Connector no longer fails with Checksum error when downloading large files with low bandwidth.

W-12630308

Amazon S3 Connector no longer creates a build-up of threads.

W-12637960

Amazon S3 Connector incorrectly threw the MULE_UNKNOWN error type. Now, the connector throws the REQUEST_TIMEOUT error type.

W-12521306

Streaming capabilities for the Get Object and Put Object operations are now improved to avoid memory leaks with large files.

W-11900293

The On New Object and On Deleted Object sources now initialize as expected.

W-11697870

The connector no longer duplicates query parameters in HTTP requests to AWS.

W-11754732

The com.fasterxml.jackson.core:jackson-databind:2.13.2.2 is updated to com.fasterxml.jackson.core:jackson-databind:2.13.4.2 to address reported security vulnerabilities.

W-11853408

The netty-io:netty-handler dependency is now excluded to address a security vulnerability.

W-11515673

The Custom STS Endpoint field is now accessible in the UI and in the XML.

W-11507468

AWS SDK version is upgraded to 1.12.261 to address a reported security vulnerability.

W-11454665

The Get Object operation now processes large files successfully.

W-11469263

AWS error types with spaces in the name no longer cause MULE:UNKNOWN errors because they are now parsed correctly.

W-11538480

The On New Object source now works as expected when specifying Bucket Name as bucketname/foldername.

W-11307008

Fixed reported security vulnerabilities by upgrading the Jackson Databind library from com.fasterxml.jackson.core:jackson-databind:2.13.1 to com.fasterxml.jackson.core:jackson-databind:2.13.2.2.

W-10920484

Updated the com.fasterxml.jackson.core library to 2.13.1 to address security vulnerabilities.

CONN-9809

Upgraded the com.google.code.gson library due to a security vulnerability.

CONN-9251