From 258bf9397c6b35b9b72dd547a7d594f69cced2b1 Mon Sep 17 00:00:00 2001
From: Jiacheng Yang <jiacheng.yang@databricks.com>
Date: Thu, 15 Aug 2024 14:32:27 -0700
Subject: [PATCH] Only add encryption headers for for SSE-C in get.

---
 object_store/src/aws/client.rs | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/object_store/src/aws/client.rs b/object_store/src/aws/client.rs
index 007e271086d5..6fe4889db176 100644
--- a/object_store/src/aws/client.rs
+++ b/object_store/src/aws/client.rs
@@ -705,7 +705,14 @@ impl GetClient for S3Client {
         };
 
         let mut builder = self.client.request(method, url);
-        builder = builder.headers(self.config.encryption_headers.clone().into());
+        if self
+            .config
+            .encryption_headers
+            .0
+            .contains_key("x-amz-server-side-encryption-customer-algorithm")
+        {
+            builder = builder.headers(self.config.encryption_headers.clone().into());
+        }
 
         if let Some(v) = &options.version {
             builder = builder.query(&[("versionId", v)])