aws s3api create-session
Creates a session that establishes temporary security credentials to support fast authentication and authorization for the Zonal endpoint API operations on directory buckets. AWS CLI reference
6 options Its page in the AWS CLI reference
Options
--bucket-key-enabledSpecifies whether Amazon S3 should use an S3 Bucket Key for object encryption with server-side encryption using KMS keys (SSE-KMS).--bucketThe name of the bucket that you create a session for.--server-side-encryptionThe server-side encryption algorithm to use when you store objects in the directory bucket.--session-modeSpecifies the mode of the session that will be created, either ReadWrite or ReadOnly.--ssekms-encryption-contextSpecifies the Amazon Web Services KMS Encryption Context as an additional encryption context to use for object encryption.--ssekms-key-idIf you specify x-amz-server-side-encryption with aws:kms, you must specify the x-amz-server-side-encryption-aws-kms-key-id header with the ID (Key ID or Key ARN) of the KMS symmetric encryption customer managed key to use.