AWS AmazonS3 documentation change
Summary
Updated CloudTrail logging documentation to standardize example bucket/access point naming conventions and resource types (e.g., changing 'AWS::S3::Bucket' to 'AWS::S3Express::DirectoryBucket'). Removed redundant line breaks and made region/zone identifiers generic.
Security assessment
Changes involve documentation formatting improvements and example standardization (using placeholders like 'region' and 'zone-id'). No evidence of addressing security vulnerabilities or introducing security features. Updates to resource types (e.g., S3Express) reflect naming convention changes rather than security implications.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets-monitoring-logging.md b/AmazonS3/latest/userguide/access-points-directory-buckets-monitoring-logging.md index 34b30d6fd..ab7a3662f 100644 --- a//AmazonS3/latest/userguide/access-points-directory-buckets-monitoring-logging.md +++ b//AmazonS3/latest/userguide/access-points-directory-buckets-monitoring-logging.md @@ -7,3 +7 @@ -You can log requests made through access points and requests made to the APIs that manage access points, such as `CreateAccessPoint` and `GetAccessPointPolicy,` by using AWS CloudTrail. - -CloudTrail log entries for requests made through access points include the access point ARN (which includes the access point name) in the `resources` section of the log. +You can log requests made through access points and requests made to the APIs that manage access points, such as `CreateAccessPoint` and `GetAccessPointPolicy,` by using AWS CloudTrail. CloudTrail log entries for requests made through access points include the access point ARN (which includes the access point name) in the `resources` section of the log. @@ -13 +11 @@ For example, suppose you have the following configuration: - * A bucket named ``amzn-s3-demo-bucket1`` in Region `us-west-2` that contains an object named `my-image.jpg` + * A bucket named ``amzn-s3-demo-bucket`--`zone-id`--x-s3` in Region `region` that contains an object named `my-image.jpg`. @@ -15 +13 @@ For example, suppose you have the following configuration: - * An access point named `my-bucket-ap`\--usw2-az1--xa-s3 that is associated with `amzn-s3-demo-bucket1` + * An access point named `my-bucket-ap--zoneID--xa-s3` that is associated with ``amzn-s3-demo-bucket`--`zone-id`--x-s3` @@ -26 +24 @@ The following example shows the `resources` section of a CloudTrail log entry fo - {"type": "AWS::S3::Object", + {"type": "AWS::S3Express::Object", @@ -28 +26 @@ The following example shows the `resources` section of a CloudTrail log entry fo - "ARN": "arn:aws:s3express-us-west-2:123456789012:bucket/amzn-s3-demo-bucket1--usw2-az1--x-s3/my-image.jpg" + "ARN": "arn:aws:s3express-region:123456789012:bucket/amzn-s3-demo-bucket--zone-id--x-s3/my-image.jpg" @@ -31,2 +29,2 @@ The following example shows the `resources` section of a CloudTrail log entry fo - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3express-us-west-2:123456789012:bucket/amzn-s3-demo-bucket1--usw2-az1--x-s3" + "type": "AWS::S3Express::DirectoryBucket", + "ARN": "arn:aws::s3express:region:123456789012:bucket/amzn-s3-demo-bucket--zone-id--x-s3" @@ -36 +34 @@ The following example shows the `resources` section of a CloudTrail log entry fo - "ARN": "arn:aws:s3express:us-west-2:123456789012:accesspoint/my-bucket-ap--usw1-az1--xa-s3" + "ARN": "arn:aws:s3express:region:123456789012:accesspoint/my-bucket-ap--zoneID--xa-s3"