AWS Security ChangesHomeSearch

AWS AmazonS3 documentation change

Service: AmazonS3 · 2025-05-22 · Documentation low

File: AmazonS3/latest/userguide/access-grants.md

Summary

Added section explaining trusted identity propagation integration

Security assessment

Documents a security feature (IAM Identity Center integration) for granular access control. Enhances security documentation but does not address a specific vulnerability.

Diff

diff --git a/AmazonS3/latest/userguide/access-grants.md b/AmazonS3/latest/userguide/access-grants.md
index bda515ee3..e4e89d930 100644
--- a//AmazonS3/latest/userguide/access-grants.md
+++ b//AmazonS3/latest/userguide/access-grants.md
@@ -20,0 +21,2 @@ When you integrate S3 Access Grants with the [trusted identity propagation](http
+[Trusted identity propagation](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overview.html) is an AWS IAM Identity Center feature that administrators of connected AWS services can use to grant and audit access to service data. Access to this data is based on user attributes such as group associations. Setting up trusted identity propagation requires collaboration between the administrators of connected AWS services and the IAM Identity Center administrators. For more information, see [Prerequisites and considerations](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overall-prerequisites.html).
+