AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-03-23 · Documentation low

File: config/latest/developerguide/gs-cli-prereq.md

Summary

Added code example for S3 bucket region constraint handling

Security assessment

Documents security-relevant region constraint implementation for S3 buckets

Diff

diff --git a/config/latest/developerguide/gs-cli-prereq.md b/config/latest/developerguide/gs-cli-prereq.md
index 5175c3506..128380080 100644
--- a/config/latest/developerguide/gs-cli-prereq.md
+++ b/config/latest/developerguide/gs-cli-prereq.md
@@ -1018,0 +1019,11 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            " determine our region from our session
+            DATA(lv_region) = CONV /aws1/s3_bucketlocationcnstrnt( lo_session->get_region( ) ).
+            DATA lo_constraint TYPE REF TO /aws1/cl_s3_createbucketconf.
+            " When in the us-east-1 region, you must not specify a constraint
+            " In all other regions, specify the region as the constraint
+            IF lv_region = 'us-east-1'.
+              CLEAR lo_constraint.
+            ELSE.
+              lo_constraint = NEW /aws1/cl_s3_createbucketconf( lv_region ).
+            ENDIF.
+    
@@ -1021 +1032 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            ).
+                io_createbucketconfiguration  = lo_constraint ).