AWS config documentation change
Summary
Added code example for S3 bucket region constraint handling
Security assessment
Documents security-relevant region constraint implementation for S3 buckets
Diff
diff --git a/config/latest/developerguide/gs-cli-prereq.md b/config/latest/developerguide/gs-cli-prereq.md index 5175c3506..128380080 100644 --- a/config/latest/developerguide/gs-cli-prereq.md +++ b/config/latest/developerguide/gs-cli-prereq.md @@ -1018,0 +1019,11 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + " determine our region from our session + DATA(lv_region) = CONV /aws1/s3_bucketlocationcnstrnt( lo_session->get_region( ) ). + DATA lo_constraint TYPE REF TO /aws1/cl_s3_createbucketconf. + " When in the us-east-1 region, you must not specify a constraint + " In all other regions, specify the region as the constraint + IF lv_region = 'us-east-1'. + CLEAR lo_constraint. + ELSE. + lo_constraint = NEW /aws1/cl_s3_createbucketconf( lv_region ). + ENDIF. + @@ -1021 +1032 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - ). + io_createbucketconfiguration = lo_constraint ).