AWS AmazonS3 documentation change
Summary
Updated documentation to generalize access point usage beyond 'general purpose buckets', added FSx for OpenZFS integration references, simplified section headers, and removed redundant notes about compatibility limitations.
Security assessment
The changes emphasize access point security controls (VPC restrictions, custom block public access, and policy enforcement) but do not address a specific security vulnerability. The updates clarify existing security features rather than introducing new ones or patching issues.
Diff
diff --git a/AmazonS3/latest/userguide/access-points.md b/AmazonS3/latest/userguide/access-points.md index 02c4d6c95..37ea9a54f 100644 --- a//AmazonS3/latest/userguide/access-points.md +++ b//AmazonS3/latest/userguide/access-points.md @@ -5 +5 @@ -# Managing access to shared datasets in general purpose buckets with access points +# Managing access to shared datasets with access points @@ -7,7 +7 @@ -Amazon S3 access points for general purpose buckets simplify data access for any AWS service or customer application that stores data in S3. Access points are named network endpoints that are attached to general purpose buckets that you can use to perform S3 object operations, such as `GetObject` and `PutObject`. Each access point has distinct permissions and network controls that S3 applies for any request that is made through that access point. Each access point enforces a customized access point policy that works in conjunction with the bucket policy that is attached to the underlying bucket. You can configure any access point to accept requests only from a virtual private cloud (VPC) to restrict Amazon S3 data access to a private network. You can also configure custom block public access settings for each access point. - -###### Note - - * You can only use access points to perform operations on objects. You can't use access points to perform other Amazon S3 operations, such as modifying or deleting buckets. For a complete list of S3 operations that support access points, see [Access point for general purpose buckets compatibility](./access-points-service-api-support.html). - - * Access points work with some, but not all, AWS services and features. For example, you can't configure Cross-Region Replication to operate through an access point. For a complete list of AWS services that are compatible with S3 access points, see [Access point for general purpose buckets compatibility](./access-points-service-api-support.html). +Amazon S3 access points simplify data access for any AWS service or customer application that stores data in S3. Access points are named network endpoints that are attached to a data source such as a bucket or Amazon FSx for OpenZFS volume. For information about working with buckets, see [General purpose buckets overview](./UsingBucket.html). For information about working with FSx for OpenZFS, see [What is Amazon FSx for OpenZFS](https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/what-is-fsx.html) in the _OpenZFS User Guide_. @@ -14,0 +9 @@ Amazon S3 access points for general purpose buckets simplify data access for any +You can use access points to perform S3 object operations, such as `GetObject` and `PutObject`. Each access point has distinct permissions and network controls that S3 applies for any request that is made through that access point. Each endpoint enforces a customized access point policy that allow you to control use by resource, user, or other conditions. If your access point is attached to a bucket the access point policy works in conjunction with the underlying bucket policy. You can configure any access point to accept requests only from a virtual private cloud (VPC) to restrict Amazon S3 data access to a private network. You can also configure custom block public access settings for each access point. @@ -15,0 +11 @@ Amazon S3 access points for general purpose buckets simplify data access for any +###### Note @@ -16,0 +13 @@ Amazon S3 access points for general purpose buckets simplify data access for any +You can only use access points to perform operations on objects. You can't use access points to perform other Amazon S3 operations, such as deleting buckets or creating S3 Replication configurations. For a complete list of S3 operations that support access points, see [Access point compatibility](./access-points-service-api-support.html). @@ -18 +15 @@ Amazon S3 access points for general purpose buckets simplify data access for any -The topics in this section explain how to work with Amazon S3 access points for general purpose buckets. For information about working with general purpose buckets, see [General purpose buckets overview](./UsingBucket.html). For information about working with objects, see [Amazon S3 objects overview](./UsingObjects.html). +The topics in this section explain how to work with Amazon S3 access points. For topics on using access points with directory buckets see, [Managing access to shared datasets in directory buckets with access points](./access-points-directory-buckets.html). @@ -22 +19 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Access points for general purpose buckets naming rules, restrictions, and limitations](./access-points-restrictions-limitations-naming-rules.html) + * [Access points naming rules, restrictions, and limitations](./access-points-restrictions-limitations-naming-rules.html) @@ -24 +21 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Referencing access points for general purpose buckets with ARNs, access point aliases, or virtual-hosted–style URIs](./access-points-naming.html) + * [Referencing access points with ARNs, access point aliases, or virtual-hosted–style URIs](./access-points-naming.html) @@ -26 +23 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Access point for general purpose buckets compatibility](./access-points-service-api-support.html) + * [Access point compatibility](./access-points-service-api-support.html) @@ -28 +25 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Configuring IAM policies for using access points for general purpose buckets](./access-points-policies.html) + * [Configuring IAM policies for using access points](./access-points-policies.html) @@ -30 +27 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Monitoring and logging access points for general purpose buckets](./access-points-monitoring-logging.html) + * [Monitoring and logging access points](./access-points-monitoring-logging.html) @@ -32 +29 @@ The topics in this section explain how to work with Amazon S3 access points for - * [Creating access points for general purpose buckets](./creating-access-points.html) + * [Creating an access point](./creating-access-points.html)