AWS AmazonS3 documentation change
Summary
Updated documentation to clarify access point policy management capabilities (view/edit/delete) and added details about access point scope management
Security assessment
The changes improve documentation about IAM access control mechanisms but do not address a specific security vulnerability. The updates clarify how to manage security policies for access points, which is a security feature documentation enhancement.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets-policy.md b/AmazonS3/latest/userguide/access-points-directory-buckets-policy.md index 7ea10256a..5feeddcca 100644 --- a//AmazonS3/latest/userguide/access-points-directory-buckets-policy.md +++ b//AmazonS3/latest/userguide/access-points-directory-buckets-policy.md @@ -5 +5 @@ -# Editing or deleting policies for an access point for directory buckets +# Viewing, editing or deleting access point policies @@ -7 +7 @@ -Access points for directory buckets can include an AWS Identity and Access Management (IAM) policy to control access to the access point. You can create, edit, and delete this policy using the AWS Command Line Interface, REST API, or AWS SDKs. +You can use an AWS Identity and Access Management (IAM) access point policy to control the principal and resource that can access the access point. The access point scope manages the prefixes and API permissions for the access point. You can create, edit, and delete an access point policy using the AWS Command Line Interface, REST API, or AWS SDKs. For more information about access point scope, see [Manage the scope of your access points for directory buckets](./access-points-directory-buckets-manage-scope.html). @@ -15 +15 @@ You can use the `get-acccess-point-policy`, `put-access-point-policy`, and `dele -You can use the REST API `GetAccessPointPolicy`, `PutAccessPointPolicy`, and `DeleteAccessPointPolicy` operations to view, create, edit, or delete an access point policy. For more information, see [PutAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html), [GetAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html), or [DeleteAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html) in the Amazon Simple Storage Service API Reference. +You can use the REST API `GetAccessPointPolicy`, `DeleteAccessPointPolicy`, and `PutAccessPointPolicy` operations to view, delete, or edit an access point policy. For more information, see [PutAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html), [GetAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html), or [DeleteAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html) in the Amazon Simple Storage Service API Reference. @@ -17 +17 @@ You can use the REST API `GetAccessPointPolicy`, `PutAccessPointPolicy`, and `De -You can use the AWS SDKs to edit policies of your access points. For more information, see [list of supported SDKs](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataTableConfiguration.html#API_CreateBucketMetadataTableConfiguration_SeeAlso) in the Amazon Simple Storage Service API Reference.s +You can use the AWS SDKs to view, delete, or edit an access point policy. For more information, see the list of supported SDKs for [GetAccessControlPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html#API_control_PutAccessPointPolicy_SeeAlso), [DeleteAccessControlPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html#API_control_PutAccessPointPolicy_SeeAlso), and [PutAccessControlPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html#API_control_PutAccessPointPolicy_SeeAlso) in the Amazon Simple Storage Service API Reference.