AWS AmazonS3 documentation change
Summary
Updated example policies with concrete account IDs (111122223333), added JSON formatting, and standardized region/account placeholders
Security assessment
Changes involve example policy formatting improvements and placeholder standardization without introducing new security controls or addressing vulnerabilities
Diff
diff --git a/AmazonS3/latest/userguide/s3-tables-resource-based-policies.md b/AmazonS3/latest/userguide/s3-tables-resource-based-policies.md index a4d4c3294..ee0a3704a 100644 --- a//AmazonS3/latest/userguide/s3-tables-resource-based-policies.md +++ b//AmazonS3/latest/userguide/s3-tables-resource-based-policies.md @@ -40,0 +41,6 @@ The following example table bucket policy allows the IAM `data steward` to delet +JSON + + +**** + + @@ -48 +54 @@ The following example table bucket policy allows the IAM `data steward` to delet - "AWS": "arn:aws:iam::account_id:role/datasteward" + "AWS": "arn:aws:iam::111122223333:role/datasteward" @@ -50,3 +56,4 @@ The following example table bucket policy allows the IAM `data steward` to delet - "Action": ["s3tables:PutTableBucketMaintenanceConfiguration"], - "Resource":"arn:aws:s3tables:region:account_id:bucket/*" - }] + "Action": [ + "s3tables:PutTableBucketMaintenanceConfiguration" + ], + "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/*" @@ -53,0 +61,3 @@ The following example table bucket policy allows the IAM `data steward` to delet + ] + } + @@ -58,0 +69,6 @@ The following an example table bucket policy allows Jane, a user from AWS accoun +JSON + + +**** + + @@ -72 +88 @@ The following an example table bucket policy allows Jane, a user from AWS accoun - "Resource": "arn:aws:s3tables:region:account_id:bucket/amzn-s3-demo-table-bucket/table/*", + "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/amzn-s3-demo-table-bucket/table/*", @@ -74 +90,3 @@ The following an example table bucket policy allows Jane, a user from AWS accoun - "StringLike": {"s3tables:namespace": "hr"} + "StringLike": { + "s3tables:namespace": "hr" + } @@ -84,0 +103,6 @@ The following example table policy that allows the IAM role `data steward` to de +JSON + + +**** + + @@ -93 +117 @@ The following example table policy that allows the IAM role `data steward` to de - "AWS": "arn:aws:iam::account_id:role/datasteward" + "AWS": "arn:aws:iam::111122223333:role/datasteward" @@ -102,2 +125 @@ The following example table policy that allows the IAM role `data steward` to de - "Resource":"arn:aws:s3tables:region:account_id:bucket/amzn-s3-demo-bucket1/table/tableUUID" - }] + "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/amzn-s3-demo-bucket1/table/tableUUID" @@ -104,0 +127,3 @@ The following example table policy that allows the IAM role `data steward` to de + ] + } +