As reported in https://github.com/localstack/localstack/issues/6659#issuecomment-1630932643_, `HeadObject` does not respect `ChecksumMode`. 


```shell
at 09:31:57 ➜ AWS_DEFAULT_REGION=us-west-1 aws --endpoint-url=http://localhost:4566 s3api create-bucket --bucket test-bucket --create-bucket-configuration LocationConstraint=us-west-1
{
    "Location": "http://test-bucket.s3.localhost.localstack.cloud:4566/"
}

at 09:32:13 ➜ aws --endpoint-url=http://localhost:4566 s3api put-object --bucket test-bucket --key file.json --body README.md --checksum-algorithm SHA256
{
    "ETag": "\"4bb2f1387449d690bff6336ea255909c\"",
    "ChecksumSHA256": "bzOikXXMUqRTCrpVq7Pt7LjJ0fjR3ccUfM19S/gnfqA="
}

# SHA256 missing here
at 09:32:20 ➜ aws --endpoint-url=http://localhost:4566 s3api head-object --bucket test-bucket --key file.json --checksum-mode Enabled
{
    "AcceptRanges": "bytes",
    "LastModified": "2023-07-11T13:32:15+00:00",
    "ContentLength": 1455,
    "ETag": "\"4bb2f1387449d690bff6336ea255909c\"",
    "ContentType": "binary/octet-stream",
    "Metadata": {}
}
```

Note the equivalent response from S3 actual includes the SHA256 value

```shell
at 10:21:23 ➜ aws s3api head-object --bucket test-bucket --key file.json --checksum-mode Enabled
{
    "AcceptRanges": "bytes",
    "Expiration": "expiry-date=\"Thu, 13 Jul 2023 00:00:00 GMT\", rule-id=\"all\"",
    "LastModified": "2023-07-11T14:21:09+00:00",
    "ContentLength": 1956,
    "ChecksumSHA256": "bj7fqCqtaF95M1ULwQRDJuHbL/Xd9NVMH6pua9OINcc=",
    "ETag": "\"f4be535d45019a4408dd5369986919f8\"",
    "ContentEncoding": "",
    "ContentType": "binary/octet-stream",
   
    "Metadata": {},
    
}
```

_Originally posted by @bdurrani in https://github.com/localstack/localstack/issues/6659#issuecomment-1630932643_
            
self, s3_bucket, domain, use_virtual_address, aws_client
    ):
        """Assert that /favicon.ico s can be created/accessed/deleted using amazonaws host headers"""
        s3_key = "favicon.ico"
        content = b"test 123"
        aws_client.s3.put_(Bucket=s3_bucket, Key=s3_key, Body=content)
        aws_client.s3.head_(Bucket=s3_bucket, Key=s3_key)
        path = s3_key if use_virtual_address else f"{s3_bucket}/{s3_key}"
        url = f"{config.get_edge_url()}/{path}"
        headers = aws_stack.mock_aws_request_headers("s3")
        headers["host"] = f"{s3_bucket}.{domain}" if use_virtual_address else domain
        # get 
        result = .get(url, headers=headers)
        assert result.ok
        assert result.content == content
        # dele
        result = .delete(url, headers=headers)
        assert result.ok
        # asse
        with pytest.raises(ClientError) as exc:
            aws_client.s3.head_(Bucket=s3_bucket, Key=s3_key)
        assert exc.value.response["Error"]["Message"] == "Not Found"
class TestS3BucketPolicies:
    def test_access_to_bucket_not_denied(self, s3_bucket, monkeypatch, aws_client):