AWS cli documentation change
Summary
Updated untag-resource documentation to include directory buckets support, clarified tag removal process, added s3express:UntagResource permission requirement for directory buckets
Security assessment
The changes document new permission requirements (s3express:UntagResource) for directory buckets and maintain consistency with tag-resource updates. Enhances security documentation but doesn't indicate a vulnerability fix.
Diff
diff --git a/cli/latest/reference/s3control/untag-resource.md b/cli/latest/reference/s3control/untag-resource.md index dde3761af..36ec14033 100644 --- a//cli/latest/reference/s3control/untag-resource.md +++ b//cli/latest/reference/s3control/untag-resource.md @@ -15 +15 @@ - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -This operation removes the specified Amazon Web Services resource tags from an S3 resource. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources. +This operation removes the specified user-defined tags from an S3 resource. You can pass one or more tag keys. @@ -63 +63,7 @@ This operation removes the specified Amazon Web Services resource tags from an S -This operation is only supported for [S3 Storage Lens groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html) and for [S3 Access Grants](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html) . The tagged resource can be an S3 Storage Lens group or S3 Access Grants instance, registered location, or grant. +This operation is only supported for the following Amazon S3 resources: + + * [Directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) + * [Storage Lens groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html) + * [S3 Access Grants instances, registered locations, and grants](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html) . + + @@ -67 +73 @@ Permissions -You must have the `s3:UntagResource` permission to use this operation. +For Storage Lens groups and S3 Access Grants, you must have the `s3:UntagResource` permission to use this operation. @@ -70,0 +77,8 @@ For more information about the required Storage Lens Groups permissions, see [Se +> Directory bucket permissions + +For directory buckets, you must have the `s3express:UntagResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . + +> > HTTP Host header syntax +> +> **Directory buckets** \- The HTTP Host header syntax is `s3express-control.*region* .amazonaws.com` . + @@ -112 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3cont -> The Amazon Resource Name (ARN) of the S3 resource that you’re trying to remove the tags from. +> The Amazon Resource Name (ARN) of the S3 resource that you’re removing tags from. The tagged resource can be a directory bucket, S3 Storage Lens group or S3 Access Grants instance, registered location, or grant. @@ -237 +251 @@ None - * [AWS CLI 2.27.46 Command Reference](../../index.html) » + * [AWS CLI 2.27.49 Command Reference](../../index.html) »