AWS AmazonS3 documentation change

Service: AmazonS3 · 2025-04-28 · Documentation low

File: AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.md

Summary

Added details about Local Zones architecture, parent Zone ID, network border group, and clarified API endpoint routing for directory buckets

Security assessment

The changes provide architectural and operational clarifications without addressing security vulnerabilities or introducing security-specific content.

Diff

diff --git a/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.md b/AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.md
index fb9cf0cd9..89ffbea4e 100644
--- a//AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.md
+++ b//AmazonS3/latest/userguide/s3-lzs-for-directory-buckets.md
@@ -8,0 +9,2 @@ Before creating a directory bucket in a Local Zone, you must have the Local Zone
+A Local Zone is connected to the **parent Region** using the Amazon redundant and very high-bandwidth private network. This gives applications running in the Local Zone fast, secure, and seamless access to the rest of the AWS services in the parent Region. **Parent Zone ID** is the ID of the zone that handles some of the Local Zone control plane operations, such as API calls. **Network Border Group** is a unique group from which AWS advertises public IP addresses. For more information about Local Zones, parent Region, and parent Zone ID, see [AWS Local Zones concepts](https://docs.aws.amazon.com/local-zones/latest/ug/concepts-local-zones.html) in the AWS Local Zones _User Guide_.
+
@@ -10,0 +13,2 @@ All directory buckets use the `s3express` namespace, which is separate from the
+Bucket-level API operations (such as `CreateBucket` and `DeleteBucket`) are routed to Regional endpoints, and are referred to as Regional endpoint API operations. Regional endpoints are in the format of `s3express-control.ParentZoneID.amazonaws.com`. All object-level API operations (such as `PutObject`) and two bucket-level API operations (`CreateSession` and `HeadBucket`) are routed to Zonal endpoints, and are referred to as Zonal endpoint API operations. Zonal endpoints are in the format of `s3express-LocalZoneID.ParentRegionCode.amazonaws.com`. For a complete list of API operations by endpoint type, see [Directory bucket API operations](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-differences.html#s3-express-differences-api-operations).
+