Skip to main content

GetBucketNotificationConfiguration

GetBucketNotificationConfiguration reports which event notifications a bucket sends - the messages Amazon S3 can deliver to a topic, a queue or a function when an object is created or deleted. Bucket event notifications are not part of STRG, so there is never anything to report: the operation checks that the bucket exists and answers with an empty NotificationConfiguration document - the same answer Amazon S3 gives for a bucket with no notifications. Tools that read it while describing a bucket work unchanged.

The deprecated GetBucketNotification sends the same request and gets the same answer; this operation is the better choice for new code.

Good to know on STRG
  • Event notifications are not part of STRG, so the answer never contains a TopicConfiguration, QueueConfiguration, CloudFunctionConfiguration or EventBridgeConfiguration.
  • PutBucketNotificationConfiguration is answered with 501 NotImplemented, so a client knows straight away.
  • x-amz-expected-bucket-owner is welcome and has nothing to check: a key only ever reaches buckets of its own account.

When you'd use it​

  • Tools that describe a bucket. Infrastructure-as-code tools, backup tools and inventory scripts written for Amazon S3 read every bucket setting they know about, notifications included. On STRG the request succeeds with the empty answer, so the description completes without errors.
  • Code that checks before relying on events. An application that looks at a bucket's notification configuration before deciding how to learn about new objects finds it empty, and can fall back to listing the bucket - for example with ListObjectsV2 on a schedule.

Request​

GET /?notification HTTP/1.1
Host: my-bucket.s3.eu-central-1.strg.com
Authorization: AWS4-HMAC-SHA256 Credential=...
x-amz-date: 20260926T120000Z
x-amz-content-sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

The path-style form is GET /my-bucket?notification on s3.eu-central-1.strg.com - Addressing explains both.

Permissions​

The access key needs Read bucket settings (buckets:read-config). Every access key holds it, whether it covers all buckets or only some - a key scoped to specific buckets reads only those. Access keys has the details.

URI parameters​

NameTypeRequiredDescription
BucketStringYesThe bucket whose notification configuration to read.
notificationFlagYesSelects this operation. Sent with no value.

Any other query parameter is answered with 501 NotImplemented, so a client knows straight away that it has no effect here.

Request headers​

NameTypeRequiredDescription
x-amz-expected-bucket-ownerStringNoWelcome, with nothing to check: an access key only ever reaches its own account's buckets.

Request body​

None.

Response​

A successful request answers 200 OK with an XML body.

Response headers​

NameDescription
Content-Typeapplication/xml.
x-amz-request-idThe request ID, handy for a support request.

Response body​

The document's root element is always empty; the elements Amazon S3 can place inside it are listed so a reader knows what to expect of them:

ElementTypeDescription
NotificationConfigurationContainerThe root element. Always empty on STRG.
TopicConfigurationContainerNot sent. On Amazon S3, a topic that receives notifications.
QueueConfigurationContainerNot sent. On Amazon S3, a queue that receives notifications.
CloudFunctionConfigurationContainerNot sent. On Amazon S3, a function invoked for notifications.
EventBridgeConfigurationContainerNot sent. On Amazon S3, marks delivery of events to an event bus as enabled.
<?xml version="1.0" encoding="UTF-8"?>
<NotificationConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"/>

Errors​

These are the errors this request can return, and the situation behind each one.

CodeHTTP statusWhen
NoSuchBucket404The bucket does not exist, belongs to another account, is in a region other than the endpoint's, or the account stores nothing in the endpoint's region yet.
AccessDenied403The access key is scoped to buckets that do not include this one, or the account is not active.
InvalidAccessKeyId403The access key does not exist, has expired or been revoked - or it was created moments ago and is not usable yet in a region where the account already stores data, in which case the same request works shortly afterwards.
SignatureDoesNotMatch403The request signature does not match.
RequestTimeTooSkewed403The request time is more than 15 minutes from the server's.
AuthorizationHeaderMalformed400The signature's credential scope names a region other than the endpoint's.
NotImplemented501The request carries a query parameter this operation does not accept.
SlowDown503Too many requests. The Retry-After header says when a retry is welcome; the AWS SDKs retry on their own.
ServiceUnavailable503A temporary failure; the same request can be retried.
InternalError500An unexpected failure while checking the bucket; the same request can be retried.

Differences from Amazon S3​

The table lists each place where STRG behaves differently, and what that means for a client.

AspectAmazon S3STRG
Event notificationsConfigurable per bucket, to topics, queues, functions or an event busNot part of STRG. The answer is always the empty document
Setting themPutBucketNotificationConfigurationAnswered with 501 NotImplemented
Bucket in another region301 redirect with x-amz-bucket-region404 NoSuchBucket. A bucket is reached through its own regional endpoint.
Nothing stored in the endpoint's region yetAny valid key reaches the endpoint404 NoSuchBucket, the truthful answer: there is no bucket there
x-amz-expected-bucket-ownerChecked against the bucket ownerWelcome, with nothing to check

Examples​

Reading the notification configuration of my-bucket in eu-central-1:

aws s3api get-bucket-notification-configuration \
--bucket my-bucket \
--endpoint-url https://s3.eu-central-1.strg.com \
--region eu-central-1

The command succeeds and prints nothing, because the configuration is empty.

View as Markdown