关键术语

Authorization = "AWS" + " " + AWSAccessKeyId + ":" + Signature;

Signature = Base64( HMAC-SHA1( UTF-8-Encoding-Of(YourSecretAccessKey), UTF-8-Encoding-Of( StringToSign ) ) );

StringToSign = HTTP-Verb + "\n" +
	Content-MD5 + "\n" +
	Content-Type + "\n" +
	Date + "\n" +
	CanonicalizedAmzHeaders +
	CanonicalizedResource;

CanonicalizedResource = [ "/" + Bucket ] +
	<HTTP-Request-URI, from the protocol name up to the query string> +
	[ subresource, if present. For example "?acl", "?location", or "?logging"];

CanonicalizedAmzHeaders = <described below>

Authorization: AWS4-HMAC-SHA256
Credential=AKIAIOSFODNN7EXAMPLE/20130524/us-east-1/s3/aws4_request, 
SignedHeaders=host;range;x-amz-date,
Signature=fe5f80f77d5fa3beca038a248ff027d0445342fe2855ddc963176630326f1024

// An object consists of data and its descriptive metadata.
type Object struct {
    _ struct{} `type:"structure"`

    // The algorithm that was used to create a checksum of the object.
    ChecksumAlgorithm []*string `type:"list" flattened:"true" enum:"ChecksumAlgorithm"`

    // The entity tag is a hash of the object. The ETag reflects changes only to
    // the contents of an object, not its metadata. The ETag may or may not be an
    // MD5 digest of the object data. Whether or not it is depends on how the object
    // was created and how it is encrypted as described below:
    //
    //    * Objects created by the PUT Object, POST Object, or Copy operation, or
    //    through the AWS Management Console, and are encrypted by SSE-S3 or plaintext,
    //    have ETags that are an MD5 digest of their object data.
    //
    //    * Objects created by the PUT Object, POST Object, or Copy operation, or
    //    through the AWS Management Console, and are encrypted by SSE-C or SSE-KMS,
    //    have ETags that are not an MD5 digest of their object data.
    //
    //    * If an object is created by either the Multipart Upload or Part Copy
    //    operation, the ETag is not an MD5 digest, regardless of the method of
    //    encryption.
    ETag *string `type:"string"`

    // The name that you assign to an object. You use the object key to retrieve
    // the object.
    Key *string `min:"1" type:"string"`

    // The date the Object was Last Modified
    LastModified *time.Time `type:"timestamp"`

    // The owner of the object
    Owner *Owner `type:"structure"`

    // Size in bytes of the object
    Size *int64 `type:"integer"`

    // The class of storage used to store the object.
    StorageClass *string `type:"string" enum:"ObjectStorageClass"`
}