AWS Security ChangesHomeSearch

AWS AmazonS3 documentation change

Service: AmazonS3 · 2025-07-25 · Documentation low

File: AmazonS3/latest/userguide/s3-tables-resource-based-policies.md

Summary

Updated example policies with concrete account IDs (111122223333), added JSON formatting, and standardized region/account placeholders

Security assessment

Changes involve example policy formatting improvements and placeholder standardization without introducing new security controls or addressing vulnerabilities

Diff

diff --git a/AmazonS3/latest/userguide/s3-tables-resource-based-policies.md b/AmazonS3/latest/userguide/s3-tables-resource-based-policies.md
index a4d4c3294..ee0a3704a 100644
--- a//AmazonS3/latest/userguide/s3-tables-resource-based-policies.md
+++ b//AmazonS3/latest/userguide/s3-tables-resource-based-policies.md
@@ -40,0 +41,6 @@ The following example table bucket policy allows the IAM `data steward` to delet
+JSON
+    
+
+****
+    
+    
@@ -48 +54 @@ The following example table bucket policy allows the IAM `data steward` to delet
-                   "AWS": "arn:aws:iam::account_id:role/datasteward"
+                    "AWS": "arn:aws:iam::111122223333:role/datasteward"
@@ -50,3 +56,4 @@ The following example table bucket policy allows the IAM `data steward` to delet
-                 "Action": ["s3tables:PutTableBucketMaintenanceConfiguration"],
-                 "Resource":"arn:aws:s3tables:region:account_id:bucket/*"            
-         }]
+                "Action": [
+                    "s3tables:PutTableBucketMaintenanceConfiguration"
+                ],
+                "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/*"
@@ -53,0 +61,3 @@ The following example table bucket policy allows the IAM `data steward` to delet
+        ]
+    }
+    
@@ -58,0 +69,6 @@ The following an example table bucket policy allows Jane, a user from AWS accoun
+JSON
+    
+
+****
+    
+    
@@ -72 +88 @@ The following an example table bucket policy allows Jane, a user from AWS accoun
-                "Resource": "arn:aws:s3tables:region:account_id:bucket/amzn-s3-demo-table-bucket/table/*",
+                "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/amzn-s3-demo-table-bucket/table/*",
@@ -74 +90,3 @@ The following an example table bucket policy allows Jane, a user from AWS accoun
-                    "StringLike": {"s3tables:namespace": "hr"}
+                    "StringLike": {
+                        "s3tables:namespace": "hr"
+                    }
@@ -84,0 +103,6 @@ The following example table policy that allows the IAM role `data steward` to de
+JSON
+    
+
+****
+    
+    
@@ -93 +117 @@ The following example table policy that allows the IAM role `data steward` to de
-             "AWS": "arn:aws:iam::account_id:role/datasteward" 
+                    "AWS": "arn:aws:iam::111122223333:role/datasteward"
@@ -102,2 +125 @@ The following example table policy that allows the IAM role `data steward` to de
-            "Resource":"arn:aws:s3tables:region:account_id:bucket/amzn-s3-demo-bucket1/table/tableUUID"
-         }]
+                "Resource": "arn:aws:s3tables:us-east-1:account_id:bucket/amzn-s3-demo-bucket1/table/tableUUID"
@@ -104,0 +127,3 @@ The following example table policy that allows the IAM role `data steward` to de
+        ]
+    }
+