AWS AmazonS3 medium security documentation change

Service: AmazonS3 · 2025-04-28 · Security-related medium

File: AmazonS3/latest/userguide/access-points-directory-buckets-details.md

Summary

Updated access point examples with corrected parameters, boolean values for public access settings, and API reference links

Security assessment

Corrected public access block settings from string 'yes' to boolean 'true' values. Incorrect data types in configurations could lead to misapplied security controls, potentially exposing resources. The NetworkOrigin change from VPC to Internet with enforced public access blocks demonstrates secure configuration practices.

Diff

diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets-details.md b/AmazonS3/latest/userguide/access-points-directory-buckets-details.md
index 1efb4f779..fac536d3a 100644
--- a//AmazonS3/latest/userguide/access-points-directory-buckets-details.md
+++ b//AmazonS3/latest/userguide/access-points-directory-buckets-details.md
@@ -11 +11 @@ The following `get-access-point` example command shows how you can use the AWS C
-The following command lists details for the access point ``my-access-point`--usw2-az1--xa-s3` for AWS account `111122223333`.
+The following command lists details for the access point ``my-access-point`--`zoneID`--xa-s3` for AWS account `111122223333`.
@@ -14 +14 @@ The following command lists details for the access point ``my-access-point`--usw
-    aws s3control get-access-point --name my-access-point--usw2-az1--xa-s3 --account-id 111122223333
+    aws s3control get-access-point --name my-access-point--zoneID--xa-s3 --account-id 111122223333
@@ -20,7 +20,3 @@ The following command lists details for the access point ``my-access-point`--usw
-        "GetAccessPointResult": {
-            "Name": "my-access-point--usw2-az1--xa-s3",
-            "Bucket": "amzn-s3-demo-bucket1--usw2-az1--x-s3",
-            "NetworkOrigin": "VPC",
-            "VpcConfiguration": {
-                "VpcId": "VPC-1"
-            },
+        "Name": "example-access-point--zoneID--xa-s3",
+        "Bucket": "amzn-s3-demo-bucket--zone-id--x-s3",
+        "NetworkOrigin": "Internet",
@@ -28,11 +24,4 @@ The following command lists details for the access point ``my-access-point`--usw
-                "BlockPublicAcls": "yes",
-                "BlockPublicPolicy": "yes",
-                "IgnorePublicAcls": "yes",
-                "RestrictPublicBuckets": "yes"
-            },
-            "Scope": {
-                "Permissions": {
-                    "ScopePermissionList": {
-                        "ScopePermission": "GetObject",
-                        "ScopePermission": "PutObject"
-                    },
+            "BlockPublicAcls": true,
+            "IgnorePublicAcls": true,
+            "BlockPublicPolicy": true,
+            "RestrictPublicBuckets": true
@@ -40,17 +29,4 @@ The following command lists details for the access point ``my-access-point`--usw
-                "Prefixes": {
-                    "PrefixList": {
-                        "Prefix": "prefix-1/"
-                    }
-                }
-            },
-            "CreationDate": "January 31, 2025 14:23:45 EST",
-            "Alias": "my-access-point--usw2-az1--xa-s3",
-            "AccessPointArn": "s3://arn:aws:s3:us-west-2:111122223333:accesspoint/my-access-point--usw2-az1--xa-s3",
-            "Endpoints": {
-                "entry": {
-                    "key": "key",
-                    "value": "value"
-                }
-            },
-            "BucketAccountId": "111122223333"
-        }
+        "CreationDate": "2025-04-23T18:26:22.146000+00:00",
+        "Alias": "example-access-point--zoneID--xa-s3",
+        "AccessPointArn": "arn:aws:s3express:region:111122223333:accesspoint/example-access-point--zoneID--xa-s3",
+        "BucketAccountId": "296805379465"
@@ -64 +40 @@ You can use the REST API to view details for your access point. For more informa
-You can use the AWS SDKs to view details of your access points. For more information, see [list of supported SDKs](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataTableConfiguration.html#API_CreateBucketMetadataTableConfiguration_SeeAlso) in the Amazon Simple Storage Service API Reference.s
+You can use the AWS SDKs to view details of your access points. For more information, see [list of supported SDKs](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html#API_control_GetAccessPoint_SeeAlso) in the Amazon Simple Storage Service API Reference.
@@ -74 +50 @@ List your access points for directory buckets
-Editing or deleting policies for an access point for directory buckets
+Viewing, editing or deleting access point policies