Hi team, I am facing issues while downloading file from AWS S3 bucket when the encryption type is SSE-KMS (Server-side encryption with AWS Key Management Service keys) . However it works when the encryption type is SSE-S3(Server-side encryption with Amazon S3 managed keys). Most likely because AWS don't want us to send encryption request headers for

GET

requests and

HEAD

requests when encryption used is SSE-KMS (link)..and in pants code we do send the headers like here The relevant code in build file looks like this

run_shell_command(
    name="run-test-download",
    execution_dependencies=[":test-download"],
    command="echo $(pwd)",
)

file(
    name="test-download",
    source=http_source(url="<s3://example-bucket/bucket-data.gz>",
                       sha256="20ee0c788011355604f31e41b2ec87d718da588d7404b9bbb50",
                       len=740199)
)

And I am triggering the following pants command

pants run :run-test-download

The error message is

IntrinsicError: Client error (400) downloading file <file-name> from <S3-url>

Anyone else faced/resolved this issue? Thanks