AWS AmazonS3 documentation change
Summary
Removed documentation section about access points for directory buckets operations and permissions
Security assessment
Change removes deprecated or consolidated content about directory bucket access points but does not address security vulnerabilities or add security documentation
Diff
diff --git a/AmazonS3/latest/userguide/using-with-s3-policy-actions.md b/AmazonS3/latest/userguide/using-with-s3-policy-actions.md index 2d0507a5a..729726515 100644 --- a//AmazonS3/latest/userguide/using-with-s3-policy-actions.md +++ b//AmazonS3/latest/userguide/using-with-s3-policy-actions.md @@ -5 +5 @@ -Bucket operations and permissionsObject operations and permissionsAccess point for general purpose buckets operations and permissionsAccess point for directory buckets operations and permissionsObject Lambda Access Point operations and permissionsMulti-Region Access Point operations and permissionsBatch job operations and permissionsS3 Storage Lens configuration operations and permissionsS3 Storage Lens groups operations and permissionsS3 Access Grants instance operations and permissionsS3 Access Grants location operations and permissionsS3 Access Grants grant operations and permissionsAccount operations and permissions +Bucket operations and permissionsObject operations and permissionsAccess point for general purpose buckets operations and permissionsObject Lambda Access Point operations and permissionsMulti-Region Access Point operations and permissionsBatch job operations and permissionsS3 Storage Lens configuration operations and permissionsS3 Storage Lens groups operations and permissionsS3 Access Grants instance operations and permissionsS3 Access Grants location operations and permissionsS3 Access Grants grant operations and permissionsAccount operations and permissions @@ -27,2 +26,0 @@ For more information on how to address the HTTP `403 Forbidden` errors in S3, se - * Access point for directory buckets operations and permissions - @@ -322,32 +319,0 @@ API operations | Policy actions | Description of policy actions -## Access point for directory buckets operations and permissions - -Access point for directory buckets operations are S3 API operations that operate on the `accesspoint` resource type. You must specify S3 policy actions for access point operations in IAM identity-based policies, not in bucket policies or access point policies. - -###### Note - -If you want to use access points for directory buckets to control access to bucket or object operations, note the following: - - * For using access points to control access to bucket operations, see [Bucket operations in policies for access points for directory buckets](./security_iam_service-with-iam.html#bucket-operations-ap-directory-buckets). - - * For using access points to control access to object operations, see [Object operations in policies for access points for directory buckets](./security_iam_service-with-iam.html#object-operations-ap-directory-buckets). - - * For more information about how to configure access point policies, see [Configuring IAM policies for using access points for directory buckets](./access-points-directory-buckets-policies.html). - - - - -The following is the mapping of operations for access points for directory buckets and required policy actions. - -API operations | Policy actions | Description of policy actions ----|---|--- -[CreateAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html) | (Required) `s3express:CreateAccessPoint` | Required to create an access point that's associated with an directory bucket. -ListAccessPointsForDirectoryBuckets | (required) `s3express:ListAccessPointsForDirectoryBuckets` | Required to list access points for directory buckets. -[GetAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html) | (required) `s3express:GetAccessPoint` | Required to view configuration information about an access point. -[DeleteAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html) | (Required) `s3express:DeleteAccessPoint` | Required to delete an access point. -[DeleteAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html) | (Required) `s3express:DeleteAccessPointPolicy` | Required to delete an access point policy. -[GetAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html) | (Required) `s3express:GetAccessPointPolicy` | Required to retrieve an access point policy. -[PutAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html) | (Required) `s3express:PutAccessPointPolicy` | Required to put an access point policy. -DeleteAccessPointScope | (Required) `s3express:DeleteAccessPointScope` | Required to delete an access points for directory buckets scope. -GetAccessPointScope | (Required) `s3express:GetAccessPointScope` | Required to retrieve an access points for directory buckets scope. -PutAccessPointScope | (Required `s3express:PutAccessPointScope` | Required to put an access points for directory buckets scope. -