AWS AmazonS3 documentation change
Summary
Clarified access point naming conventions and removed specific reference to AWS Dedicated Local Zones. Rephrased VPC restriction explanation.
Security assessment
Changes primarily involve clarifications and formatting adjustments. The VPC restriction mention is a restatement of existing security controls but does not introduce new security documentation or address a specific vulnerability.
Diff
diff --git a/AmazonS3/latest/userguide/access-points-directory-buckets.md b/AmazonS3/latest/userguide/access-points-directory-buckets.md index 1c501e41b..70dd3e24e 100644 --- a//AmazonS3/latest/userguide/access-points-directory-buckets.md +++ b//AmazonS3/latest/userguide/access-points-directory-buckets.md @@ -7 +7 @@ -Access points simplify managing data access at scale for shared datasets in Amazon S3. Access points are unique hostnames you create to enforce distinct permissions and network controls for all requests made through an access point. You can create hundreds of access points per bucket, each with a distinct name and permissions customized for each application. Each access point works in conjunction with the bucket policy that is attached to the underlying bucket. +Amazon S3 Access Points simplify managing data access at scale for shared datasets in Amazon S3. Access points are unique hostnames you create to enforce distinct permissions and network controls for all requests made through an access point. You can create hundreds of access points per bucket, each with a distinct name and permissions customized for each application. Each access point works in conjunction with the bucket policy that is attached to the underlying bucket. @@ -9 +9 @@ Access points simplify managing data access at scale for shared datasets in Amaz -In directory buckets, an access point name consists of a base name you provide, followed by the Zone ID, and then `--xa-s3`. For example, ``accesspointname`--`zoneID`--xa-s3`. After you create an access point, you can't change the name or the Zone ID. Access points for directory buckets are supported only in AWS Dedicated Local Zones. +In directory buckets, an access point name consists of a base name you provide, followed by the Zone ID (AWS Availability Zone or Local Zone) of your directory bucket location, and then `--xa-s3`. For example, ``accesspointname`--`zoneID`--xa-s3`. After you create an access point, you can't change the name or the Zone ID. @@ -13 +13 @@ With access points for directory buckets, you can use the access point scope to -To restrict Amazon S3 data access to a private network, you can also configure any access point to accept requests only from a virtual private cloud (VPC). +You can configure any access point to accept requests only from a virtual private cloud (VPC). This restricts Amazon S3 data access to a private network.