AWS bedrock documentation change
Summary
Updated documentation links and fixed typo in S3 bucket access permissions guidance
Security assessment
Changes involve clarifying documentation links and fixing a typo without introducing new security content or addressing vulnerabilities
Diff
diff --git a/bedrock/latest/userguide/s3-bucket-access.md index e01e6e1a7..c0fba9bc0 100644 --- a/bedrock/latest/userguide/s3-bucket-access.md +++ b/bedrock/latest/userguide/s3-bucket-access.md @@ -32 +32 @@ The following describes how to determine where you need to attach the necessary - * If you prefer to use a custom service role or the identity that requires access isn't a service role, navigate to to learn how to create an identity-based policy with the proper permissions. + * If you prefer to use a custom service role or the identity that requires access isn't a service role, navigate to Attach permissions to an IAM identity to allow it to access an Amazon S3 bucket to learn how to create an identity-based policy with the proper permissions. @@ -38 +38 @@ The following describes how to determine where you need to attach the necessary - * If the identity requires access to S3 data in a different account, navigate to to learn how to create an S3 bucket policy with the proper permissions. + * If the identity requires access to S3 data in a different account, navigate to Attach a bucket policy to an Amazon S3 bucket to allow another account to access it to learn how to create an S3 bucket policy with the proper permissions. @@ -150 +150 @@ If your S3 bucket is versioning-enabled, each object version that you upload by -The permissions are similar to the identity-based permissions desccribed in Attach permissions to an IAM identity to allow it to access an Amazon S3 bucket. However, each statement also requires you to specify the identity for which to grant permissions to the resource in the `Principal` field. Specify the identity (with most features in Amazon Bedrock, this is the service role) in the `Principal` field. Add, modify, and remove the statements, resources, and conditions in the following policy and replace `${values}` as necessary: +The permissions are similar to the identity-based permissions described in Attach permissions to an IAM identity to allow it to access an Amazon S3 bucket. However, each statement also requires you to specify the identity for which to grant permissions to the resource in the `Principal` field. Specify the identity (with most features in Amazon Bedrock, this is the service role) in the `Principal` field. Add, modify, and remove the statements, resources, and conditions in the following policy and replace `${values}` as necessary: