AWS AmazonS3 documentation change
Summary
Updated documentation to specify that access point creation instructions apply specifically to general purpose buckets, including title/heading changes and terminology clarifications
Security assessment
Changes focus on clarifying scope (general purpose buckets) rather than addressing security vulnerabilities or introducing new security features. The VPC restriction functionality remains unchanged.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-vpc.md b/AmazonS3/latest/userguide/access-points-vpc.md index bb35a35d8..8cf2dc5d5 100644 --- a/AmazonS3/latest/userguide/access-points-vpc.md +++ b/AmazonS3/latest/userguide/access-points-vpc.md @@ -5 +5 @@ -# Creating access points restricted to a virtual private cloud +# Creating access points for general purpose buckets restricted to a virtual private cloud @@ -7 +7 @@ -When you create an access point, you can choose to make the access point accessible from the internet, or you can specify that all requests made through that access point must originate from a specific virtual private cloud (VPC). An access point that's accessible from the internet is said to have a network origin of `Internet`. It can be used from anywhere on the internet, subject to any other access restrictions in place for the access point, underlying bucket, and related resources, such as the requested objects. An access point that's only accessible from a specified VPC has a network origin of `VPC`, and Amazon S3 rejects any request made to the access point that doesn't originate from that VPC. +When you create an access point for a general purpose bucket, you can choose to make the access point accessible from the internet, or you can specify that all requests made through that access point must originate from a specific virtual private cloud (VPC). An access point that's accessible from the internet is said to have a network origin of `Internet`. It can be used from anywhere on the internet, subject to any other access restrictions in place for the access point, underlying bucket, and related resources, such as the requested objects. An access point that's only accessible from a specified VPC has a network origin of `VPC`, and Amazon S3 rejects any request made to the access point that doesn't originate from that VPC. @@ -73 +73 @@ The following example policy statement configures a VPC endpoint to allow calls -The `"Resource"` declaration in this example uses an Amazon Resource Name (ARN) to specify the access point. For more information about access point ARNs, see [Using Amazon S3 access points](./using-access-points.html). +The `"Resource"` declaration in this example uses an Amazon Resource Name (ARN) to specify the access point. For more information about access point ARNs, see [Using Amazon S3 access points for general purpose buckets](./using-access-points.html). @@ -85 +85 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Creating an access point +Creating access points for general purpose buckets