Print msg unless --quiet is set.

Factory to put objects into a moto-mocked S3 bucket.

Create a boto3 client for the given service, using the configured region. :param service: AWS service name (e.g. "s3", "iam", "s3control").

Factory to build argparse.Namespace with defaults.

List objects in the source bucket and write them to local CSV manifest files. Uses boto3 paginators to iterate through all objects (or object ver

Return the KMS key ARN configured for SSE-KMS on a bucket, or None. Returns the key ARN for both customer-managed and AWS-managed (aws/s3) k

Helper to create mock boto3 clients.

Build a MagicMock s3 client whose paginator returns the given objects.

Parse an S3 URI into (bucket, key). :param uri: S3 URI in the format s3://<bucket>/<key> :return: A tuple of (bucket, key) :raises V

Check bucket exists and is accessible, with distinct error messages.

create a simple json response

create a simple json plain text response

Validate that the source bucket exists and the manifest bucket is ready. Checks the source bucket via HeadBucket (exits on 403 or 404). If the ma

Check all tasks in registry.

Validate and return the S3 URI, or fail with a descriptive error.

Format status with emoji.

Generates formatted string containing CloudTrail summary info. Args: summary_items (list): List of tuples containing CloudTrail summary

Partition a list of inventory files into fixed-size bins, one bin per batch job. :param files: Full list of inventory files from the source

Print task status.

Write content to destination/filename. :param content: Content to write :param destination: S3 URI or local directory path :param fi

Upload local manifest CSV files to the manifest bucket. Standard part files are uploaded as {manifest_key}-001.csv, {manifest_key}-002.csv, etc.

Return the region of a bucket. Returns 'us-east-1' when location is None.

Yield (bucket, key, version_id) tuples from CSV lines. Keys are URL-decoded from the manifest's percent-encoded format. version_id is None wh

Add new task to registry.

Create a minimally permissioned IAM role for DataSync to access a specific S3 bucket.

Create an enhanced DataSync task with throughput limits. Args: source_bucket: Source S3 bucket name source_region: Sourc

Create a DataSync S3 location, or return existing one.

Delete a DataSync location.

Delete an IAM role and its inline policies.

List all manifest CSVs matching {base_key}-*.csv in the bucket.

Ensure an S3 bucket exists, creating it if necessary. If the bucket does not exist, it is created with public access blocked and AES256 server-si

Format bytes to human readable.

Generate destination bucket name based on source bucket and region. S3 bucket names must be 3-63 characters. The region suffix is always

Helper method to provide a shorter way of referring to the singleton client method

Load existing task registry or create new one.

Create a botocore ClientError for testing.

Publishes message to SNS topic. Args: subject (string): Subject of message to be published to topic. message (string): Content o

Resolve the IAM role ARN from the Click context if not explicitly provided. If the role ARN comes from context (i.e. chained after setup-iam

Save task registry to file.

Validate that an IAM role trusts the required principal. :param role_arn: The ARN of the role. :param required_principal: The service pr

Convert a TagSet list to URL-encoded key=value&key=value string.

Check bucket exists and is accessible, with distinct error messages.

Check bucket exists and is accessible, with distinct error messages.

Check a bucket policy allows s3.amazonaws.com to perform required_action.

Check the IAM role trusts batchoperations.s3.amazonaws.com.

Check inventory configuration on the source bucket. :return: (failed, inventory_dest_bucket)

Smoke-test KMS permissions on the IAM role for source and destination keys.

Check at least one enabled replication rule exists on the source bucket.

Check the report bucket allows s3:PutObject from batchoperations.s3.amazonaws.com.

Check versioning is enabled on source and destination buckets.

Configure logging based on verbosity count and quiet flag. - ``--quiet``: CRITICAL only (suppresses all normal output) - 0 (default): WA

Return a list of part sizes by calling head_object with PartNumber for each part.

Return a boto3 Session, optionally using a named profile.

Parse a single file entry from a manifest's ``files`` array. :param index: Zero-based index of the entry, used in error messages. :param

Read a CSV manifest from a local file or S3 URI (s3://bucket/key).

Truncate a name to fit within max_length, stripping trailing hyphens.

Construct a new :class:`Manifest` from a subset of inventory files, preserving source metadata. :param source: The original manifest to copy

Check status of a single task.

Clean up a single task and its resources.

S3 Batch Replication tools.

Mirror the versioning configuration from the source bucket to the destination bucket. Reads the versioning status from the source bucket and appl

Create an S3 Batch Replication job. The job must be manually activated in the console or via the API after review. :param manifest_uri:

Create destination S3 bucket with secure policy matching source versioning.

Create a single S3 Batch Operations copy job for one manifest file. Fetches the ETag of the manifest object via HeadObject (required by the Manif

Create a least-privilege IAM role for S3 Batch Operations. The role trusts the batchoperations.s3.amazonaws.com service principal and grants:

Deletes IAM access key pair identified by access key ID for specified user. Args: username (string): Username of IAM user to delete key

Delete a DataSync task.

Download a manifest from S3. :param s3_uri: S3 URI of the manifest :return: The content of the manifest as a dictionary :raises Runt

Download a multi-part S3 object, handling missing parts gracefully.

Download a single part using partNumber query parameter. Returns: (success: bool, part_info: PartInfo or None)

Log the details of an event