AWS AmazonS3 documentation change

Service: AmazonS3 · 2025-07-25 · Documentation low

File: AmazonS3/latest/userguide/security_iam_service-with-iam.md

Summary

Added JSON formatting sections, modified resource ARN patterns, and updated policy statement IDs

Security assessment

Documentation formatting improvements and example policy corrections (e.g., changing 'amzn-s3-demo-bucket' to wildcard) without security-specific changes

Diff

diff --git a/AmazonS3/latest/userguide/security_iam_service-with-iam.md b/AmazonS3/latest/userguide/security_iam_service-with-iam.md
index 98822300a..06d5623f0 100644
--- a//AmazonS3/latest/userguide/security_iam_service-with-iam.md
+++ b//AmazonS3/latest/userguide/security_iam_service-with-iam.md
@@ -127,0 +128,6 @@ The following example blocks access if a secure transport protocol isn’t used:
+JSON
+    
+
+****
+    
+    
@@ -226,0 +234,6 @@ The following bucket policy grants the user ``Akua`` with account ``12345678901`
+JSON
+    
+
+****
+    
+    
@@ -240 +253 @@ The following bucket policy grants the user ``Akua`` with account ``12345678901`
-                "Resource": "arn:aws:s3:::amzn-s3-demo-bucket"
+                "Resource": "arn:aws:s3:::"
@@ -253,0 +268,6 @@ The following access point policy grants the user ``Akua`` with account ``123456
+JSON
+    
+
+****
+    
+    
@@ -259 +279 @@ The following access point policy grants the user ``Akua`` with account ``123456
-                "Sid": "Allow Akua to list objects in the bucket through access point",
+                "Sid": "Allow Akua to list objects in the bucket through ",
@@ -284,0 +306,6 @@ The following access point policy grants the user ``Akua`` with account ``123456
+JSON
+    
+
+****
+    
+    
@@ -290 +317 @@ The following access point policy grants the user ``Akua`` with account ``123456
-                "Sid": "Allow Akua to list objects in the bucket through access point",
+                "Sid": "Allow Akua to list objects in the bucket through ",
@@ -322,0 +351,6 @@ The following bucket policy grants the user ``Akua`` with account ``12345678901`
+JSON
+    
+
+****
+    
+    
@@ -336 +370 @@ The following bucket policy grants the user ``Akua`` with account ``12345678901`
-                "Resource": "arn:aws:s3:::amzn-s3-demo-bucket/*"
+                "Resource": "arn:aws:s3:::/*"
@@ -352,0 +388,6 @@ The following access point policy grants the user ``Akua`` with account ``123456
+JSON
+    
+
+****
+    
+    
@@ -358 +399 @@ The following access point policy grants the user ``Akua`` with account ``123456
-                "Sid": "Allow Akua to get objects through access point",
+                "Sid": "Allow Akua to get objects through ",
@@ -415,0 +458,6 @@ The following IAM identity-based policy grants the `s3:GetAccessPointPolicy` per
+JSON
+    
+
+****
+    
+    
@@ -421 +469 @@ The following IAM identity-based policy grants the `s3:GetAccessPointPolicy` per
-                "Sid": "Grant permission to retrieve the access point policy of access point example-access-point",
+                "Sid": "Grant permission to retrieve the  policy of  example-access-point",
@@ -441,0 +491,6 @@ The following IAM identity-based policy grants the `s3express:GetAccessPointPoli
+JSON
+    
+
+****
+    
+    
@@ -447 +502 @@ The following IAM identity-based policy grants the `s3express:GetAccessPointPoli
-                "Sid": "Grant permission to retrieve the access point policy of access point example-access-point--usw2-az1--xa-s3",
+                "Sid": "Grant permission to retrieve the  policy of  example-access-point--usw2-az1--xa-s3",
@@ -514,0 +571,6 @@ The following IAM identity-based policy grants the `s3:DescribeJob` permission t
+JSON
+    
+
+****
+    
+    
@@ -539,0 +603,6 @@ The following IAM identity-based policy grants the `s3:GetAccountPublicAccessBlo
+JSON
+    
+
+****
+    
+    
@@ -650,0 +721,6 @@ Suppose that Account A, represented by account ID ``123456789012``, owns a bucke
+JSON
+    
+
+****
+    
+