AWS AmazonS3 documentation change
Summary
Added console management instructions and clarified table bucket policy scope
Security assessment
The added note clarifies security boundaries by stating policies don't apply to cross-account tables. While this improves security documentation, there's no evidence of addressing a specific vulnerability. The console instructions help implement security policies correctly.
Diff
diff --git a/AmazonS3/latest/userguide/s3-tables-bucket-policy.md b/AmazonS3/latest/userguide/s3-tables-bucket-policy.md index 10bcdb973..07ca9c816 100644 --- a//AmazonS3/latest/userguide/s3-tables-bucket-policy.md +++ b//AmazonS3/latest/userguide/s3-tables-bucket-policy.md @@ -12,0 +13,4 @@ For more information, see the following topics. For more information about suppo +###### Note + +The table bucket policy provides access to the tables stored in the bucket. Table bucket policies don't apply to tables owned by other accounts. + @@ -23,0 +28,19 @@ This example shows how to create a table bucket policy by using the AWS CLI. To + 1. Open the Amazon S3 console at [https://console.aws.amazon.com/s3/](https://console.aws.amazon.com/s3/). + + 2. In the left navigation pane, choose **Amazon S3**. + + 3. Choose **Table buckets** and select the table bucket name that you want to add a policy to. + + 4. Choose the **Permissions** tab. + + 5. Under **Table bucket policy** , Choose **Edit**. + + 6. In the policy editor, enter your policy JSON. + + 7. (Optional) Choose **Policy examples** to see sample policies that you can adapt to your needs. + + 8. After entering your policy, choose **Save changes**. + + + + @@ -32,0 +56,11 @@ This example shows how to view the policy that's attached to a table bucket by u + 1. Open the Amazon S3 console at [https://console.aws.amazon.com/s3/](https://console.aws.amazon.com/s3/). + + 2. In the left navigation pane, choose **Amazon S3**. + + 3. Choose **Table buckets** and select the table bucket name that you want to view the policy for. + + 4. Choose the **Permissions** tab. + + + + @@ -41,0 +76,13 @@ This example shows how to delete a table bucket policy by using the AWS CLI. To + 1. Open the Amazon S3 console at [https://console.aws.amazon.com/s3/](https://console.aws.amazon.com/s3/). + + 2. In the left navigation pane, choose **Amazon S3**. + + 3. Choose **Table buckets** and select the table bucket name that you want to delete a policy for. + + 4. Choose the **Permissions** tab. + + 5. Under **Table bucket policy** , choose **Delete**. + + + +