AWS AmazonS3 documentation change
Summary
Simplified documentation structure, removed redundant ARN/alias details, and consolidated virtual-hosted-style URI guidance
Security assessment
The changes restructure documentation without introducing or removing security-specific content. The retained HTTPS enforcement note is not a new addition. Removal of alias limitations (e.g., IAM policy restrictions) lacks explicit evidence of addressing a security issue.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets-naming.md b/AmazonS3/latest/userguide/access-points-directory-buckets-naming.md index 67fe05e6e..7422d65dc 100644 --- a//AmazonS3/latest/userguide/access-points-directory-buckets-naming.md +++ b//AmazonS3/latest/userguide/access-points-directory-buckets-naming.md @@ -5 +5 @@ -Access points for directory buckets ARNsAccess points for directory buckets aliases +Referring to access points by virtual-hosted-style URIs @@ -7 +7 @@ Access points for directory buckets ARNsAccess points for directory buckets alia -# Referencing access points for directory buckets with ARNs, access point aliases, or virtual-hosted–style URIs +# Referencing access points for directory buckets @@ -9,58 +9 @@ Access points for directory buckets ARNsAccess points for directory buckets alia -After you create an access point, you can use it as an endpoint to preform a number of operations. When referring to an access point you can use the Amazon Resource Names (ARNs), access point alias, or virtual-hosted–style URI. - -###### Topics - - * Access points for directory buckets ARNs - - * Access points for directory buckets aliases - - - - -## Access points for directory buckets ARNs - -Access points have Amazon Resource Names (ARNs). Access point ARNs are similar to bucket ARNs, but they are explicitly typed and encode the access point's AWS Region, zone ID, and the AWS account ID of the access point's owner. For more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the _AWS General Reference_. - -Access point ARNs use the following format: - - - arn:aws:s3express:region:account-id:accesspoint/myaccesspoint--usw2-az1--xa-s3 - -`arn:aws:s3express:`us-west-2`:`666666666666`:accesspoint/`myaccesspoint--usw2-az1--xa-s3`` represents the access point named ``myaccesspoint--usw2-az1--xa-s3``, owned by account ``666666666666`` in the Region ``us-west-2`` and `Availability Zone 1`. - -ARNs for objects accessed through an access point use the following format: - - - arn:aws:s3express:region:account-id:accesspoint/myaccesspoint--usw2-az1--xa-s3/object/resource - -`arn:aws:s3express:`us-west-2`:`111122223333`:accesspoint/`myaccesspoint--usw2-az1--xa-s3`/object/`unit-01`` represents the object `unit-01`, accessed through the access point named `myaccesspoint--usw2-az1--xa-s3`, owned by account `111122223333` in the Region `us-west-2` in `availability zone 1`. - -## Access points for directory buckets aliases - -When you create an access point, Amazon S3 automatically generates an access point alias. You can use the access point alias instead of a bucket name for all data operations. For a list of these operations, see [Access point for directory buckets compatibility](./access-points-directory-buckets-service-api-support.html). For directory buckets, the access point name and alias are the same value and cannot be changed. You can use the access point name and alias interchangeably. - -Access points for directory buckets aliases have the following limitations: - - * Aliases cannot be configured by customers. - - * Aliases cannot be deleted or modified or disabled on an access point. - - * Aliases cannot be used in AWS Identity and Access Management (IAM) policies. - - - - -### Virtual-hosted–style URI - -Access points only support virtual-host-style addressing. In a virtual-hosted–style URI, the access point name, AWS account, and AWS Region is part of the domain name in the URL. For more information about virtual hosting, see [Virtual hosting of buckets](./VirtualHosting.html). - -Virtual-hosted–style URI for access points use the following format: - - - https://access-point-name--usw2-az1--xa-s3-account-id.s3-accesspoint.region.amazonaws.com - -###### Note - - * If your access point name includes dash (-) characters, include the dashes in the URL and insert another dash before the account ID. For example, to use an access point named ``finance-docs`` owned by account ``123456789012`` in the Region ``us-west-2``, the appropriate URL would be `https://`finance-docs`--usw2-az1--xa-s3-`123456789012`.s3-accesspoint.`us-west-2`.amazonaws.com`. - - * S3 access points don't support access through HTTP. Access points support only secure access through HTTPS. +After you create an access point, you can use it as an endpoint to preform object operations. When referring to an access point, you can use the access point name or virtual-hosted–style URI. For access points for directory buckets, the access point alias is the same as the access point name. You can use the access point name instead of a bucket name for all data operations. For a list of these operations, see [Object operations for access points for directory buckets](./access-points-directory-buckets-service-api-support.html). @@ -67,0 +11 @@ Virtual-hosted–style URI for access points use the following format: +## Referring to access points by virtual-hosted-style URIs @@ -68,0 +13 @@ Virtual-hosted–style URI for access points use the following format: +Access points only support virtual-host-style addressing. Access points use the same format as directory bucket endpoints. For more information see [Regional and Zonal endpoints for directory buckets](./s3-express-Regions-and-Zones.html). @@ -69,0 +15 @@ Virtual-hosted–style URI for access points use the following format: +S3 access points don't support access through HTTP. Access points support only secure access through HTTPS. @@ -79 +25 @@ Naming rules, restrictions, and limitations -Access point compatibility +Access points object operations