AWS AmazonS3 documentation change
Summary
Added documentation about AWS managed vs customer-managed table buckets, including details about access controls and encryption configurations
Security assessment
The change adds documentation about security-relevant features like default encryption configurations and read-only access constraints for AWS-managed buckets, but does not indicate any security vulnerability being addressed
Diff
diff --git a/AmazonS3/latest/userguide/s3-tables-buckets.md b/AmazonS3/latest/userguide/s3-tables-buckets.md index 0410a6612..8155901c6 100644 --- a//AmazonS3/latest/userguide/s3-tables-buckets.md +++ b//AmazonS3/latest/userguide/s3-tables-buckets.md @@ -4,0 +5,2 @@ +Table bucket types + @@ -7 +9 @@ -Amazon S3 table buckets are an S3 bucket type that you can use to create and store tables as S3 resources. Table buckets are used to store tabular data and metadata as objects for use in analytics workloads. S3 performs maintenance in your table buckets automatically to help reduce your table storage costs. For more information, see [Maintenance for table buckets](./s3-table-buckets-maintenance.html). +Amazon S3 table buckets are an S3 bucket type that you can use to create and store tables as S3 resources. Table buckets are used to store tabular data and metadata as objects for use in analytics workloads. S3 performs maintenance in your table buckets automatically to help reduce your table storage costs. For more information, see [S3 Tables maintenance](./s3-tables-maintenance-overview.html). @@ -19,0 +22,14 @@ By default, you can create up to 10 table buckets per AWS Region in an AWS accou +## Types of table buckets + +Amazon S3 supports the following types of table buckets: + +**Customer-managed table buckets** + + +Customer-managed table buckets are resources for storing Amazon S3 Tables created and managed by customers. You create these buckets explicitly, choose their names, and maintain full control over the tables and namespaces within them. For customer-managed table buckets, you can create, delete, set custom default encryption, or configure maintenance options as needed. + +**AWS managed table buckets** + + +AWS managed table buckets are AWS managed resources that automatically store tables created by AWS services, such as the live inventory and journal tables created by S3 Metadata. These buckets provide a centralized location for all system-generated tables. These buckets follow a standard naming convention, use a standard namespace for all tables, and have preset maintenance and default encryption configurations which S3 modifies on your behalf. You have read-only access to query the data, while AWS handles all table creation, updates, and maintenance operations. For more information, see [Working with AWS managed table buckets](./s3-tables-aws-managed-buckets.html). + @@ -33,0 +50,2 @@ There are several types of Amazon S3 buckets. Before creating a bucket, make sur + * [Working with AWS managed table buckets](./s3-tables-aws-managed-buckets.html) +