AWS AmazonS3 documentation change
Summary
Added explicit statement that anonymous users cannot initiate multipart uploads.
Security assessment
Clarifies an existing security control but does not indicate a newly addressed vulnerability.
Diff
diff --git a/AmazonS3/latest/userguide/mpuoverview.md b/AmazonS3/latest/userguide/mpuoverview.md index 9a381a8b3..ff630e0dd 100644 --- a//AmazonS3/latest/userguide/mpuoverview.md +++ b//AmazonS3/latest/userguide/mpuoverview.md @@ -45 +45 @@ You can list all of your in-progress multipart uploads or get a list of the part -When you send a request to initiate a multipart upload, make sure to specify a checksum type. Amazon S3 will then return a response with an upload ID, which is a unique identifier for your multipart upload. This upload ID is required when you upload parts, list parts, complete an upload, or stop an upload. If you want to provide metadata describing the object being uploaded, you must provide it in the request to initiate the multipart upload. +When you send a request to initiate a multipart upload, make sure to specify a checksum type. Amazon S3 will then return a response with an upload ID, which is a unique identifier for your multipart upload. This upload ID is required when you upload parts, list parts, complete an upload, or stop an upload. If you want to provide metadata describing the object being uploaded, you must provide it in the request to initiate the multipart upload. Anonymous users cannot initiate multipart uploads.