# 3️⃣ Copy while injecting the extracted metadata aws s3 cp s3://src-bucket/path/to/file.txt s3://dest-bucket/path/to/file.txt \ --metadata-directive REPLACE \ --metadata "$CUSTOM" – You explicitly set the metadata that S3 knows how to store ( x-amz-meta-* ). You avoid trying to copy LastModified (which S3 will always overwrite). If you need timestamps: # Encode the original mtime as a custom header ORIG_MTIME=$(date -d "$(jq -r '.LastModified' src-meta.json)" +%s) aws s3 cp ... --metadata "orig-mtime=$ORIG_MTIME" Now downstream processes can read orig-mtime and restore it if required. 5.2 Azure Blob – Copying Tags & Metadata # 1️⃣ Get source tags (requires Azure CLI 2.45+) az storage blob show --container-name srcc \ --name path/file.txt --account-name srcacct \ --query tags > src-tags.json
# Capture metadata gsutil stat -j gs://src-bucket/file.txt > src-meta.json metadata xfer not supported
# 3️⃣ Apply tags after copy (if supported in target region) az storage blob tag set \ --container-name destc \ --name path/file.txt \ --account-name destacct \ --tags @src-tags.json – Azure separates blob metadata (user‑defined key/value) and blob tags (indexable key/value). The copy API only moves the blob data and metadata ; tags need a second call. 5.3 Google Cloud Storage – Using gsutil cp -p # The -p flag copies ACLs and metadata, but NOT custom object metadata between # different storage classes. If that fails, drop the flag: gsutil cp -p gs://src-bucket/file.txt gs://dest-bucket/file.txt || \ gsutil cp gs://src-bucket/file.txt gs://dest-bucket/file.txt If you do need custom metadata: # 3️⃣ Copy while injecting the extracted metadata
| Type | Example | Where you see it | |------|---------|------------------| | | Created , Modified , Accessed | File systems, S3 Object Versioning | | Permissions / ACLs | rw-r--r-- , IAM policies | POSIX FS, Azure Blob BlobACL , S3 Bucket ACL | | Custom tags / key‑value pairs | department=finance , env=prod | S3 Object Tags, Azure Blob Tags, GCS Labels | | Content‑type / encoding | application/json , gzip | HTTP headers stored with the object | | Checksums / ETags | MD5 hash, x-amz-checksum | Used for integrity verification | | Retention / Legal Hold | retain-until=2028-12-31 | S3 Object Lock, Azure Immutable Blob | if you need the metadata
# 2️⃣ Copy blob *without* tags first az storage blob copy start \ --destination-blob path/file.txt \ --destination-container destc \ --destination-account-name destacct \ --source-uri "https://srcacct.blob.core.windows.net/srcc/path/file.txt"
If you’re not seeing that exact wording, you’re probably dealing with an equivalent error—look for the word metadata and unsupported . 3️⃣ Why Does It Happen? The Technical Deep‑Dive 3.1 Mismatched Metadata Models | Source | Destination | Gap | |--------|-------------|-----| | POSIX FS (mtime, atime, uid/gid) | S3 Object (no POSIX timestamps) | No place to store mtime ; you need to map to x-amz-meta-mtime custom header. | | Azure Blob (Blob Index Tags) | Google Cloud Storage (Labels) | Tag key‑value limits differ; some tags exceed length limits. | | S3 Object (User‑Defined Metadata) | Azure Blob (User‑Defined Metadata) | S3 allows up to 2 KB total, Azure only 8 KB; naming restrictions differ. | | FTP (UNIX permissions in “mode” field) | S3 (no ACL per object) | Only bucket‑level ACLs exist; object‑level ACL must be emulated. |
[remote] type = "s3" provider = "AWS" metadata = false # disables user‑defined metadata copy Or, if you need the metadata, map it: