AWS AmazonS3 documentation change
Summary
Added link to knowledge article about IAM access to KMS-encrypted buckets
Security assessment
Improves documentation about security controls (KMS/IAM) but does not address vulnerabilities
Diff
diff --git a/AmazonS3/latest/userguide/UsingKMSEncryption.md b/AmazonS3/latest/userguide/UsingKMSEncryption.md index 626b5f24f..3da1b6d5b 100644 --- a//AmazonS3/latest/userguide/UsingKMSEncryption.md +++ b//AmazonS3/latest/userguide/UsingKMSEncryption.md @@ -27 +27 @@ If you use KMS keys, you can use AWS KMS through the [AWS Management Console](ht - * Audit KMS key usage for correct use. Auditing is supported by the [AWS KMS API](https://docs.aws.amazon.com/kms/latest/APIReference/), but not by the [AWS KMSAWS Management Console](https://console.aws.amazon.com/kms). + * Audit KMS key usage for correct use. Auditing is supported by the [AWS KMS API](https://docs.aws.amazon.com/kms/latest/APIReference/) but not by the [AWS KMS Console;](https://console.aws.amazon.com/kms). @@ -35,0 +36,2 @@ There are additional charges for using AWS KMS keys. For more information, see [ +For instructions on allowing IAM users to access KMS-encrypted buckets see [My Amazon S3 bucket has default encryption using a custom AWSAWS KMS key. How can I allow users to download from and upload to the bucket?](https://repost.aws/knowledge-center/s3-bucket-default-encryption-kms) in the AWS re:Post Knowledge Center. +