AWS cli medium security documentation change
Summary
Updated CLI version reference from 2.28.11 to 2.28.12. Added documentation links for access points tagging. Expanded permissions requirement to include access points for directory buckets. Added warning about URL encoding header values with spaces.
Security assessment
The added warning about URL encoding headers with spaces addresses potential security issues related to improper header parsing or injection attacks. This is a security best practice to prevent malformed requests or header injection vulnerabilities.
Diff
diff --git a/cli/latest/reference/s3control/untag-resource.md b/cli/latest/reference/s3control/untag-resource.md index 586b5342e..f5714cb2d 100644 --- a//cli/latest/reference/s3control/untag-resource.md +++ b//cli/latest/reference/s3control/untag-resource.md @@ -15 +15 @@ - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) » @@ -64,0 +65,2 @@ This operation is only supported for the following Amazon S3 resources: + * [Access Points for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-db-tagging.html) + * [Access Points for general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-tagging.html) @@ -79 +81 @@ For more information about the required Storage Lens Groups permissions, see [Se -For directory buckets, you must have the `s3express:UntagResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . +For directory buckets and access points for directory buckets, you must have the `s3express:UntagResource` permission to use this operation. For more information about directory buckets policies and permissions, see [Identity and Access Management (IAM) for S3 Express One Zone](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-permissions.html) in the _Amazon S3 User Guide_ . @@ -86,0 +89,4 @@ For information about S3 Tagging errors, see [List of Amazon S3 Tagging error co +### Warning + +You must URL encode any signed header values that contain spaces. For example, if your header value is `my file.txt` , containing two spaces after `my` , you must URL encode this value to `my%20%20file.txt` . + @@ -251 +257 @@ None - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) »