AWS AmazonS3 documentation change
Summary
Updated access point naming conventions and restrictions documentation. Removed specific zone ID example, clarified Zone ID formatting, restricted support to Dedicated Local Zones, reorganized VPC restriction context, and updated section titles/links.
Security assessment
Changes focus on documentation clarity and technical accuracy rather than addressing security vulnerabilities. While VPC restriction is a security feature, this documentation update merely reorganizes existing security-related information rather than introducing new security controls or addressing vulnerabilities.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets.md b/AmazonS3/latest/userguide/access-points-directory-buckets.md index 02769e0fd..778c271ee 100644 --- a//AmazonS3/latest/userguide/access-points-directory-buckets.md +++ b//AmazonS3/latest/userguide/access-points-directory-buckets.md @@ -9 +9 @@ Access points simplify managing data access at scale for shared datasets in Amaz -In directory buckets, an access point name consists of a base name you provide, followed by the zoneID (AWS Local Zone), and then --xa-s3. For example, accesspointname--ZoneId--xa-s3. An example name is myaccesspoint--use1-az5--xa-s3. After you create an access point, you can't change the name or the zone. You can restrict access to specific prefixes, API actions, or a VPC. +In directory buckets, an access point name consists of a base name you provide, followed by the Zone ID, and then `--xa-s3`. For example, ``accesspointname`--`zoneid`--xa-s3`. After you create an access point, you can't change the name or the Zone ID. Access points for directory buckets are supported only in AWS Dedicated Local Zones. @@ -11 +11 @@ In directory buckets, an access point name consists of a base name you provide, -With access points for directory buckets, you can restrict access to specific prefixes, API actions, or a VPC. You can specify any amount of prefixes, but the total length of characters of all prefixes must be less than 256 KB. You can configure any access point to accept requests only from a virtual private cloud (VPC) to restrict Amazon S3 data access to a private network. +With access points for directory buckets, you can use the access point scope to restrict access to specific prefixes API actions. You can specify any amount of prefixes, but the total length of characters of all prefixes must be less than 256 bytes. @@ -13 +13 @@ With access points for directory buckets, you can restrict access to specific pr -In this section, the topics explain how to use access points for directory buckets. For information about working with directory buckets, see [Working with directory buckets](./directory-buckets-overview.html). +To restrict Amazon S3 data access to a private network, you can also configure any access point to accept requests only from a virtual private cloud (VPC). @@ -15 +15 @@ In this section, the topics explain how to use access points for directory bucke -Access points for directory buckets are only in AWS Dedicated Local Zones. For more information on Local Zones and directory buckets, see [Concepts for directory buckets in Local Zones](./s3-lzs-for-directory-buckets.html). +In this section, the topics explain how to use access points for directory buckets. For information about directory buckets, see [Working with directory buckets](./directory-buckets-overview.html). @@ -21 +21 @@ Access points for directory buckets are only in AWS Dedicated Local Zones. For m - * [Referencing access points for directory buckets with ARNs, access point aliases, or virtual-hosted–style URIs](./access-points-directory-buckets-naming.html) + * [Referencing access points for directory buckets](./access-points-directory-buckets-naming.html) @@ -23 +23 @@ Access points for directory buckets are only in AWS Dedicated Local Zones. For m - * [Access point for directory buckets compatibility](./access-points-directory-buckets-service-api-support.html) + * [Object operations for access points for directory buckets](./access-points-directory-buckets-service-api-support.html) @@ -29 +29 @@ Access points for directory buckets are only in AWS Dedicated Local Zones. For m - * [Creating an access point for directory buckets](./creating-access-points-directory-buckets.html) + * [Creating access points for directory buckets](./creating-access-points-directory-buckets.html)