AWS cli medium security documentation change
Summary
Added deprecation warning for V1 API, recommended SSE-KMS encryption guidance, and updated permissions documentation
Security assessment
Added explicit security guidance about encrypting metadata tables with SSE-KMS and required permissions for encryption. The deprecation warning encourages moving to more secure V2 API.
Diff
diff --git a/cli/latest/reference/s3api/create-bucket-metadata-table-configuration.md b/cli/latest/reference/s3api/create-bucket-metadata-table-configuration.md index 3b75d808c..931abf039 100644 --- a//cli/latest/reference/s3api/create-bucket-metadata-table-configuration.md +++ b//cli/latest/reference/s3api/create-bucket-metadata-table-configuration.md @@ -14,2 +14,2 @@ - * [previous](create-bucket.html "create-bucket") | - * [AWS CLI 2.27.50 Command Reference](../../index.html) » + * [previous](create-bucket-metadata-configuration.html "create-bucket-metadata-configuration") | + * [AWS CLI 2.27.51 Command Reference](../../index.html) » @@ -22 +22 @@ - * [← create-bucket](create-bucket.html "previous chapter \(use the left arrow\)") / + * [← create-bucket-metadata-configuration](create-bucket-metadata-configuration.html "previous chapter \(use the left arrow\)") / @@ -59 +59,7 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Creates a metadata table configuration for a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the _Amazon S3 User Guide_ . +### Warning + +We recommend that you create your S3 Metadata configurations by using the V2 [CreateBucketMetadataConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html) API operation. We no longer recommend using the V1 `CreateBucketMetadataTableConfiguration` API operation. + +If you created your S3 Metadata configuration before July 15, 2025, we recommend that you delete and re-create your configuration by using [CreateBucketMetadataConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html) so that you can expire journal table records and create a live inventory table. + +Creates a V1 S3 Metadata configuration for a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the _Amazon S3 User Guide_ . @@ -64,0 +71,2 @@ To use this operation, you must have the following permissions. For more informa +If you want to encrypt your metadata tables with server-side encryption with Key Management Service (KMS) keys (SSE-KMS), you need additional permissions. For more information, see [Setting up permissions for configuring metadata tables](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-permissions.html) in the _Amazon S3 User Guide_ . + @@ -119 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3-200 -> The general purpose bucket that you want to create the metadata table configuration in. +> The general purpose bucket that you want to create the metadata table configuration for. @@ -174 +182 @@ JSON Syntax: -> The expected owner of the general purpose bucket that contains your metadata table configuration. +> The expected owner of the general purpose bucket that corresponds to your metadata table configuration. @@ -277 +285 @@ None - * [← create-bucket](create-bucket.html "previous chapter \(use the left arrow\)") / + * [← create-bucket-metadata-configuration](create-bucket-metadata-configuration.html "previous chapter \(use the left arrow\)") / @@ -286,2 +294,2 @@ None - * [previous](create-bucket.html "create-bucket") | - * [AWS CLI 2.27.50 Command Reference](../../index.html) » + * [previous](create-bucket-metadata-configuration.html "create-bucket-metadata-configuration") | + * [AWS CLI 2.27.51 Command Reference](../../index.html) »