AWS cli documentation change
Summary
Added documentation about 'aws:fsx' encryption requirement for S3 access points interacting with Amazon FSx file systems
Security assessment
Documents encryption behavior for FSx file systems accessed via S3 access points, emphasizing automatic encryption at rest but not addressing a specific security vulnerability
Diff
diff --git a/cli/latest/reference/s3api/put-object.md b/cli/latest/reference/s3api/put-object.md index a9a5e5472..70934ec90 100644 --- a//cli/latest/reference/s3api/put-object.md +++ b//cli/latest/reference/s3api/put-object.md @@ -15 +15 @@ - * [AWS CLI 2.27.42 Command Reference](../../index.html) » + * [AWS CLI 2.27.45 Command Reference](../../index.html) » @@ -444 +444 @@ JSON Syntax: -> The server-side encryption algorithm that was used when you store this object in Amazon S3 (for example, `AES256` , `aws:kms` , `aws:kms:dsse` ). +> The server-side encryption algorithm that was used when you store this object in Amazon S3 or Amazon FSx. @@ -453,0 +454,4 @@ JSON Syntax: +> +> * **S3 access points for Amazon FSx** \- When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is `aws:fsx` . All Amazon FSx file systems have encryption configured by default and are encrypted at rest. Data is automatically encrypted before being written to the file system, and automatically decrypted as it is read. These processes are handled transparently by Amazon FSx. +> + @@ -457,0 +462 @@ JSON Syntax: +> * `aws:fsx` @@ -486,0 +492 @@ JSON Syntax: +> * `FSX_OPENZFS` @@ -795 +801,5 @@ ServerSideEncryption -> (string) -> The server-side encryption algorithm used when you store this object in Amazon S3. +> The server-side encryption algorithm used when you store this object in Amazon S3 or Amazon FSx. +> +> ### Note +> +> When accessing data stored in Amazon FSx file systems using S3 access points, the only valid server side encryption option is `aws:fsx` . @@ -861 +871 @@ RequestCharged -> (string) - * [AWS CLI 2.27.42 Command Reference](../../index.html) » + * [AWS CLI 2.27.45 Command Reference](../../index.html) »