AWS cli documentation change
Summary
Updated CLI version reference from 2.28.11 to 2.28.12, expanded supported resources for tagging, clarified permissions, and added a warning about URL encoding headers with spaces.
Security assessment
The permission clarification for directory buckets and access points improves access control documentation, and the warning promotes secure header handling. However, there is no evidence these changes address a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/s3control/tag-resource.md b/cli/latest/reference/s3control/tag-resource.md index c84e0efe8..f63350a7f 100644 --- a//cli/latest/reference/s3control/tag-resource.md +++ b//cli/latest/reference/s3control/tag-resource.md @@ -15 +15 @@ - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) » @@ -60,0 +61,12 @@ Creates a new user-defined tag or updates an existing tag. Each tag is a label c +### Note + +This operation is only supported for the following Amazon S3 resource: + + * [Access Points for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html) + * [Access Points for general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html) + * [Directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) + * [S3 Storage Lens groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-lens-groups.html) + * [S3 Access Grants instances, registered locations, or grants](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-tagging.html) . + + + @@ -79 +91 @@ For more information about the required Storage Lens Groups permissions, see [Se -For directory buckets, you must have the `s3express:TagResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . +For directory buckets and access points for directory buckets, you must have the `s3express:TagResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . @@ -86,0 +99,4 @@ For information about S3 Tagging errors, see [List of Amazon S3 Tagging error co +### Warning + +You must URL encode any signed header values that contain spaces. For example, if your header value is `my file.txt` , containing two spaces after `my` , you must URL encode this value to `my%20%20file.txt` . + @@ -273 +289 @@ None - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) »