AWS Security ChangesHomeSearch

AWS appstream2 documentation change

Service: appstream2 · 2025-03-26 · Documentation low

File: appstream2/latest/developerguide/home-folders-s3.md

Summary

Added documentation about new S3 bucket naming format (Version 2) for home folders and preserved legacy format information.

Security assessment

The change provides updated bucket naming conventions but doesn't introduce or modify security controls. While S3 bucket security is important, this update is purely about naming structure rather than access policies or encryption settings.

Diff

diff --git a/appstream2/latest/developerguide/home-folders-s3.md b/appstream2/latest/developerguide/home-folders-s3.md
index d0984a97d..f31ba1630 100644
--- a/appstream2/latest/developerguide/home-folders-s3.md
+++ b/appstream2/latest/developerguide/home-folders-s3.md
@@ -7 +7,15 @@
-AppStream 2.0 manages user content stored in home folders by using Amazon S3 buckets created in your account. For every AWS Region, AppStream 2.0 creates a bucket in your account. All user content generated from streaming sessions of stacks in that Region is stored in that bucket. The buckets are fully managed by the service without any input or configuration from an administrator. The buckets are named in a specific format as follows: 
+AppStream 2.0 manages user content stored in home folders by using Amazon S3 buckets created in your account. For every AWS Region, AppStream 2.0 creates a bucket in your account. All user content generated from streaming sessions of stacks in that Region is stored in that bucket. The buckets are fully managed by the service without any input or configuration from an administrator.
+
+The new enhanced buckets are named in a specific format (Version 2) as follows: 
+    
+    
+    appstream2-36fb080bb8-region-code-account-id-without-hyphens-random-identifier
+
+Where ``region-code`` is the AWS Region code in which the stack is created and ``account-id-without-hyphens`` is your Amazon Web Services account ID. The first part of the bucket name, `appstream2-36fb080bb8-`, does not change across accounts or Regions. 
+
+For example, if you enable home folders for stacks in the US West (Oregon) Region (us-west-2) on account number 123456789012, the service creates an Amazon S3 bucket in that Region with the name shown. Only an administrator with sufficient permissions can delete this bucket.
+    
+    
+    appstream2-36fb080bb8-us-west-2-123456789012-abcdefg
+
+The old version buckets are named as follows. Accounts created before AppStream 2.0 introduced the new enhanced bucket naming (Version 2) will follow the old naming format.