AWS AmazonS3 documentation change
Summary
Updated documentation to consistently use 'general purpose bucket' terminology throughout, clarifying scope of documentation to specifically cover general purpose buckets. Modified section headers, descriptions, and examples to reflect this specificity.
Security assessment
Changes focus on terminology consistency (adding 'general purpose' qualifier) rather than addressing security vulnerabilities or introducing new security features. Existing security recommendations (e.g., Block Public Access, IAM usage) remain unchanged in substance.
Diff
diff --git a/AmazonS3/latest/userguide/UsingBucket.md b/AmazonS3/latest/userguide/UsingBucket.md index 41c13bba3..c65b49efe 100644 --- a//AmazonS3/latest/userguide/UsingBucket.md +++ b//AmazonS3/latest/userguide/UsingBucket.md @@ -5 +5 @@ -General purpose buckets overviewCommon bucket patternsPermissionsManaging public access to bucketsBucket configurationBucket operationsBucket performance monitoring +General purpose buckets overviewCommon general purpose bucket patternsPermissionsManaging public access to general purpose bucketsgeneral purpose bucket configurationgeneral purpose bucket operationsgeneral purpose bucket performance monitoring @@ -7 +7 @@ General purpose buckets overviewCommon bucket patternsPermissionsManaging public -# Buckets overview +# General purpose buckets overview @@ -13 +13 @@ There are several types of Amazon S3 buckets. Before creating a bucket, make sur -The following sections provide more information about general purpose buckets, including bucket naming rules, quotas, and bucket configuration details. For a list of restriction and limitations related to Amazon S3 buckets see, [Bucket quotas, limitations, and restrictions](./BucketRestrictions.html). +The following sections provide more information about general purpose buckets, including bucket naming rules, quotas, and bucket configuration details. For a list of restriction and limitations related to Amazon S3 buckets see, [General purpose bucket quotas, limitations, and restrictions](./BucketRestrictions.html). @@ -19 +19 @@ The following sections provide more information about general purpose buckets, i - * Common bucket patterns + * Common general purpose bucket patterns @@ -23 +23 @@ The following sections provide more information about general purpose buckets, i - * Managing public access to buckets + * Managing public access to general purpose buckets @@ -25 +25 @@ The following sections provide more information about general purpose buckets, i - * Bucket configuration options + * general purpose bucket configuration options @@ -27 +27 @@ The following sections provide more information about general purpose buckets, i - * Bucket operations + * general purpose bucket operations @@ -29 +29 @@ The following sections provide more information about general purpose buckets, i - * Bucket performance monitoring + * general purpose bucket performance monitoring @@ -36 +36 @@ The following sections provide more information about general purpose buckets, i -A general purpose bucket is a container for objects stored in Amazon S3. You can store any number of objects in a bucket and all accounts have a default bucket quota of 10,000 general purpose buckets. To see your bucket utilization, bucket quota, or request an increase to this quota, visit the [Service Quotas console](https://console.aws.amazon.com/servicequotas/home/services/s3/quotas/). +Every object is contained in a bucket. For example, if the object named `photos/puppy.jpg` is stored in the `amzn-s3-demo-bucket` general purpose bucket in the US West (Oregon) Region, then it is addressable by using the URL `https://amzn-s3-demo-bucket.s3.us-west-2.amazonaws.com/photos/puppy.jpg`. For more information, see [Accessing a Bucket](./access-bucket-intro.html). @@ -45,2 +44,0 @@ A general purpose bucket is a container for objects stored in Amazon S3. You can -Every object is contained in a bucket. For example, if the object named `photos/puppy.jpg` is stored in the `amzn-s3-demo-bucket` bucket in the US West (Oregon) Region, then it is addressable by using the URL `https://amzn-s3-demo-bucket.s3.us-west-2.amazonaws.com/photos/puppy.jpg`. For more information, see [Accessing a Bucket](./access-bucket-intro.html). - @@ -49 +47 @@ In terms of implementation, buckets and objects are AWS resources, and Amazon S3 -This section describes how to work with buckets. For information about working with objects, see [Amazon S3 objects overview](./UsingObjects.html). +This section describes how to work with general purpose buckets. For information about working with objects, see [Amazon S3 objects overview](./UsingObjects.html). @@ -51 +49 @@ This section describes how to work with buckets. For information about working w -Amazon S3 supports global buckets, which means that each bucket name must be unique across all AWS accounts in all the AWS Regions within a partition. A partition is a grouping of Regions. AWS currently has three partitions: `aws` (Standard Regions), `aws-cn` (China Regions), and `aws-us-gov` (AWS GovCloud (US)). +Amazon S3 supports global general purpose buckets, which means that each bucket name must be unique across all AWS accounts in all the AWS Regions within a partition. A partition is a grouping of Regions. AWS currently has three partitions: `aws` (Standard Regions), `aws-cn` (China Regions), and `aws-us-gov` (AWS GovCloud (US)). @@ -53 +51 @@ Amazon S3 supports global buckets, which means that each bucket name must be uni -After a bucket is created, the name of that bucket cannot be used by another AWS account in the same partition until the bucket is deleted. You should not depend on specific bucket naming conventions for availability or security verification purposes. For bucket naming guidelines, see [General purpose bucket naming rules](./bucketnamingrules.html). +After a general purpose bucket is created, the name of that bucket cannot be used by another AWS account in the same partition until the bucket is deleted. You should not depend on specific bucket naming conventions for availability or security verification purposes. For bucket naming guidelines, see [General purpose bucket naming rules](./bucketnamingrules.html). @@ -61 +59 @@ Objects that belong to a bucket that you create in a specific AWS Region never l -## Common bucket patterns +## Common general purpose bucket patterns @@ -63 +61 @@ Objects that belong to a bucket that you create in a specific AWS Region never l -When you build applications on Amazon S3, you can use unique general purpose buckets to separate different datasets or workloads. Depending on your use case, there are different design patterns and best practices for using buckets. For more information, see [Common bucket patterns for building applications on Amazon S3](./common-bucket-patterns.html). +When you build applications on Amazon S3, you can use unique general purpose buckets to separate different datasets or workloads. Depending on your use case, there are different design patterns and best practices for using general purpose buckets. For more information, see [Common general purpose bucket patterns for building applications on Amazon S3](./common-bucket-patterns.html). @@ -67 +65 @@ When you build applications on Amazon S3, you can use unique general purpose buc -You can use your AWS account root user credentials to create a bucket and perform any other Amazon S3 operation. However, we recommend that you do not use the root user credentials of your AWS account to make requests, such as to create a bucket. Instead, create an AWS Identity and Access Management (IAM) user, and grant that user full access (users by default have no permissions). +You can use your AWS account root user credentials to create a general purpose bucket and perform any other Amazon S3 operation. However, we recommend that you do not use the root user credentials of your AWS account to make requests, such as to create a bucket. Instead, create an AWS Identity and Access Management (IAM) user, and grant that user full access (users by default have no permissions). @@ -75 +73 @@ The AWS account that creates a resource owns that resource. For example, if you -## Managing public access to buckets +## Managing public access to general purpose buckets @@ -77 +75 @@ The AWS account that creates a resource owns that resource. For example, if you -Public access is granted to buckets and objects through bucket policies, access control lists (ACLs), or both. To help you manage public access to Amazon S3 resources, Amazon S3 provides settings to block public access. Amazon S3 Block Public Access settings can override ACLs and bucket policies so that you can enforce uniform limits on public access to these resources. You can apply Block Public Access settings to individual buckets or to all buckets in your account. +Public access is granted to general purpose buckets and objects through bucket policies, access control lists (ACLs), or both. To help you manage public access to Amazon S3 resources, Amazon S3 provides settings to block public access. Amazon S3 Block Public Access settings can override ACLs and bucket policies so that you can enforce uniform limits on public access to these resources. You can apply Block Public Access settings to individual buckets or to all buckets in your account. @@ -79 +77 @@ Public access is granted to buckets and objects through bucket policies, access -To ensure that all of your Amazon S3 buckets and objects have their public access blocked, all four settings for Block Public Access are enabled by default when you create a new bucket. We recommend that you turn on all four settings for Block Public Access for your account too. These settings block all public access for all current and future buckets. +To ensure that all of your Amazon S3 general purpose buckets and objects have their public access blocked, all four settings for Block Public Access are enabled by default when you create a new bucket. We recommend that you turn on all four settings for Block Public Access for your account too. These settings block all public access for all current and future buckets. @@ -89 +87 @@ For more information, see [Getting started with a secure static website](https:/ -If you see an `Error` when you list your buckets and their public access settings, you might not have the required permissions. Make sure that you have the following permissions added to your user or role policy: +If you see an `Error` when you list your general purpose buckets and their public access settings, you might not have the required permissions. Make sure that you have the following permissions added to your user or role policy: @@ -102 +100 @@ In some rare cases, requests can also fail because of an AWS Region outage. -## Bucket configuration options +## general purpose bucket configuration options @@ -104 +102 @@ In some rare cases, requests can also fail because of an AWS Region outage. -Amazon S3 supports various options for you to configure your bucket. For example, you can configure your bucket for website hosting, add a configuration to manage the lifecycle of objects in the bucket, and configure the bucket to log all access to the bucket. Amazon S3 supports subresources for you to store and manage the bucket configuration information. You can use the Amazon S3 API to create and manage these subresources. However, you can also use the console or the AWS SDKs. +Amazon S3 supports various options for you to configure your general purpose bucket. For example, you can configure your bucket for website hosting, add a configuration to manage the lifecycle of objects in the bucket, and configure the bucket to log all access to the bucket. Amazon S3 supports subresources for you to store and manage the bucket configuration information. You can use the Amazon S3 API to create and manage these subresources. However, you can also use the console or the AWS SDKs. @@ -122 +120 @@ _replication_ | Replication is the automatic, asynchronous copying of objects a -_requestPayment_ | By default, the AWS account that creates the bucket (the bucket owner) pays for downloads from the bucket. Using this subresource, the bucket owner can specify that the person requesting the download will be charged for the download. Amazon S3 provides an API for you to manage this subresource. For more information, see [Using Requester Pays buckets for storage transfers and usage](./RequesterPaysBuckets.html). +_requestPayment_ | By default, the AWS account that creates the bucket (the bucket owner) pays for downloads from the bucket. Using this subresource, the bucket owner can specify that the person requesting the download will be charged for the download. Amazon S3 provides an API for you to manage this subresource. For more information, see [Using Requester Pays general purpose buckets for storage transfers and usage](./RequesterPaysBuckets.html). @@ -128 +126 @@ _website_ | You can configure your bucket for static website hosting. Amazon S3 -## Bucket operations +## general purpose bucket operations @@ -130 +128 @@ _website_ | You can configure your bucket for static website hosting. Amazon S3 -The high availability engineering of Amazon S3 is focused on _get_ , _put_ , _list_ , and _delete_ operations. Because bucket operations work against a centralized, global resource space, we recommend that you don't create, delete, or configure buckets on the high availability code path of your application. It's better to create, delete, or configure buckets in a separate initialization or setup routine that you run less often. +The high availability engineering of Amazon S3 is focused on _get_ , _put_ , _list_ , and _delete_ operations. Because general purpose bucket operations work against a centralized, global resource space, we recommend that you don't create, delete, or configure buckets on the high availability code path of your application. It's better to create, delete, or configure buckets in a separate initialization or setup routine that you run less often. @@ -132 +130 @@ The high availability engineering of Amazon S3 is focused on _get_ , _put_ , _li -## Bucket performance monitoring +## general purpose bucket performance monitoring