{
  "context": "This criteria evaluates how well the engineer uses the AWS SDK for JavaScript v3 S3 client to implement server-side encryption with customer-provided keys (SSEC). The focus is on proper usage of SSEC-specific parameters and commands.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "S3Client initialization",
      "description": "Creates an S3Client instance from @aws-sdk/client-s3 with appropriate configuration (region, credentials, etc.)",
      "max_score": 10
    },
    {
      "name": "PutObjectCommand usage",
      "description": "Uses PutObjectCommand from @aws-sdk/client-s3 to upload objects to S3",
      "max_score": 15
    },
    {
      "name": "GetObjectCommand usage",
      "description": "Uses GetObjectCommand from @aws-sdk/client-s3 to download objects from S3",
      "max_score": 15
    },
    {
      "name": "SSEC encryption parameters",
      "description": "Correctly sets SSECustomerAlgorithm to 'AES256' for both upload and download operations",
      "max_score": 15
    },
    {
      "name": "SSECustomerKey parameter",
      "description": "Properly encodes and passes the customer encryption key using SSECustomerKey parameter (base64-encoded 32-byte key)",
      "max_score": 20
    },
    {
      "name": "SSECustomerKeyMD5 parameter",
      "description": "Correctly calculates and provides the MD5 hash of the encryption key using SSECustomerKeyMD5 parameter (base64-encoded MD5)",
      "max_score": 15
    },
    {
      "name": "Stream handling",
      "description": "Properly handles the response body stream from GetObjectCommand, converting it to string using appropriate method (e.g., transformToString or manual stream reading)",
      "max_score": 10
    }
  ]
}