AWS cli medium security documentation change
Summary
Updated CLI version reference, added documentation links for access points tagging, expanded permissions note for directory buckets/access points, added warning about URL encoding headers with spaces
Security assessment
Added warning about URL encoding signed headers addresses potential security risks related to request validation. Improper encoding could lead to signature mismatches or injection vulnerabilities during authentication.
Diff
diff --git a/cli/latest/reference/s3control/list-tags-for-resource.md b/cli/latest/reference/s3control/list-tags-for-resource.md index bbb195336..4d4c7164d 100644 --- a//cli/latest/reference/s3control/list-tags-for-resource.md +++ b//cli/latest/reference/s3control/list-tags-for-resource.md @@ -15 +15 @@ - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) » @@ -64,0 +65,2 @@ This operation is only supported for the following Amazon S3 resources: + * [Access Points for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html) + * [Access Points for general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html) @@ -79 +81 @@ For more information about the required Storage Lens Groups permissions, see [Se -For directory buckets, you must have the `s3express:ListTagsForResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . +For directory buckets and access points for directory buckets, you must have the `s3express:ListTagsForResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . @@ -86,0 +89,4 @@ For information about S3 Tagging errors, see [List of Amazon S3 Tagging error co +### Warning + +You must URL encode any signed header values that contain spaces. For example, if your header value is `my file.txt` , containing two spaces after `my` , you must URL encode this value to `my%20%20file.txt` . + @@ -252 +258 @@ Tags -> (list) - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) »