AWS amazonglacier medium security documentation change
Summary
Updated terminology from 'S3 Glacier' to 'Glacier' and fixed references to storage classes. Added an unexpected string '&TCX5-2025-waiver;' in JSON policy examples.
Security assessment
The addition of '&TCX5-2025-waiver;' in JSON policy examples introduces a syntax error (invalid character sequence) that could break policy validation. This could lead to misconfigured permissions for SNS topic policies, potentially causing notification failures or unintended access. The rest of the changes are non-security-related terminology updates.
Diff
diff --git a/amazonglacier/latest/dev/downloading-an-archive-using-dotnet.md b/amazonglacier/latest/dev/downloading-an-archive-using-dotnet.md index 7310df39a..3a2082b10 100644 --- a//amazonglacier/latest/dev/downloading-an-archive-using-dotnet.md +++ b//amazonglacier/latest/dev/downloading-an-archive-using-dotnet.md @@ -7 +7 @@ Downloading an Archive Using the High-Level API of the AWS SDK for .NETDownloadi -**This page is only for existing customers of the S3 Glacier service using Vaults and the original REST API from 2012.** +**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.** @@ -9 +9 @@ Downloading an Archive Using the High-Level API of the AWS SDK for .NETDownloadi -If you're looking for archival storage solutions we suggest using the S3 Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using S3 Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. +If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. @@ -11 +11 @@ If you're looking for archival storage solutions we suggest using the S3 Glacier -# Downloading an Archive in Amazon S3 Glacier Using the AWS SDK for .NET +# Downloading an Archive in Amazon Glacier Using the AWS SDK for .NET @@ -88 +88 @@ For step-by-step instructions on how to run this example, see [Running Code Exam -The following are the steps for downloading an Amazon S3 Glacier (S3 Glacier) archive using the low-level API of the AWS SDK for .NET. +The following are the steps for downloading an Amazon Glacier (Glacier) archive using the low-level API of the AWS SDK for .NET. @@ -96 +96 @@ You need to specify an AWS Region from where you want to download the archive. A -You provide job information, such as the archive ID of the archive you want to download and the optional Amazon SNS topic to which you want S3 Glacier to post a job completion message, by creating an instance of the `InitiateJobRequest` class. S3 Glacier returns a job ID in response. The response is available in an instance of the `InitiateJobResponse` class. +You provide job information, such as the archive ID of the archive you want to download and the optional Amazon SNS topic to which you want Glacier to post a job completion message, by creating an instance of the `InitiateJobRequest` class. Glacier returns a job ID in response. The response is available in an instance of the `InitiateJobResponse` class. @@ -115 +115 @@ You provide job information, such as the archive ID of the archive you want to d -You can optionally specify a byte range to request S3 Glacier to prepare only a portion of the archive as shown in the following request. The request specifies S3 Glacier to prepare only the 1 MB to 2 MB portion of the archive. +You can optionally specify a byte range to request Glacier to prepare only a portion of the archive as shown in the following request. The request specifies Glacier to prepare only the 1 MB to 2 MB portion of the archive. @@ -140 +140 @@ You can optionally specify a byte range to request S3 Glacier to prepare only a -You must wait until the job output is ready for you to download. If you have either set a notification configuration on the vault identifying an Amazon Simple Notification Service (Amazon SNS) topic or specified an Amazon SNS topic when you initiated a job, S3 Glacier sends a message to that topic after it completes the job. The code example given in the following section uses Amazon SNS for S3 Glacier to publish a message. +You must wait until the job output is ready for you to download. If you have either set a notification configuration on the vault identifying an Amazon Simple Notification Service (Amazon SNS) topic or specified an Amazon SNS topic when you initiated a job, Glacier sends a message to that topic after it completes the job. The code example given in the following section uses Amazon SNS for Glacier to publish a message. @@ -142 +142 @@ You must wait until the job output is ready for you to download. If you have eit -You can also poll S3 Glacier by calling the `DescribeJob` method to determine the job completion status. Although, using an Amazon SNS topic for notification is the recommended approach . +You can also poll Glacier by calling the `DescribeJob` method to determine the job completion status. Although, using an Amazon SNS topic for notification is the recommended approach . @@ -146 +146 @@ You can also poll S3 Glacier by calling the `DescribeJob` method to determine th -You provide the request information such as the job ID and vault name by creating an instance of the `GetJobOutputRequest` class. The output that S3 Glacier returns is available in the `GetJobOutputResponse` object. +You provide the request information such as the job ID and vault name by creating an instance of the `GetJobOutputRequest` class. The output that Glacier returns is available in the `GetJobOutputResponse` object. @@ -172 +172 @@ The preceding code snippet downloads the entire job output. You can optionally r -In response to your `GetJobOutput` call, S3 Glacier returns the checksum of the portion of the data you downloaded, if certain conditions are met. For more information, see [Receiving Checksums When Downloading Data](./checksum-calculations-range.html). +In response to your `GetJobOutput` call, Glacier returns the checksum of the portion of the data you downloaded, if certain conditions are met. For more information, see [Receiving Checksums When Downloading Data](./checksum-calculations-range.html). @@ -174 +174 @@ In response to your `GetJobOutput` call, S3 Glacier returns the checksum of the -To verify there are no errors in the download, you can then compute the checksum on the client-side and compare it with the checksum S3 Glacier sent in the response. +To verify there are no errors in the download, you can then compute the checksum on the client-side and compare it with the checksum Glacier sent in the response. @@ -176 +176 @@ To verify there are no errors in the download, you can then compute the checksum -For an archive retrieval job with the optional range specified, when you get the job description, it includes the checksum of the range you are retrieving (SHA256TreeHash).You can use this value to further verify the accuracy of the entire byte range that you later download. For example, if you initiate a job to retrieve a tree-hash aligned archive range and then download output in chunks such that each of your `GetJobOutput` requests return a checksum, then you can compute checksum of each portion you download on the client-side and then compute the tree hash. You can compare it with the checksum S3 Glacier returns in response to your describe job request to verify that the entire byte range you have downloaded is the same as the byte range that is stored in S3 Glacier. +For an archive retrieval job with the optional range specified, when you get the job description, it includes the checksum of the range you are retrieving (SHA256TreeHash).You can use this value to further verify the accuracy of the entire byte range that you later download. For example, if you initiate a job to retrieve a tree-hash aligned archive range and then download output in chunks such that each of your `GetJobOutput` requests return a checksum, then you can compute checksum of each portion you download on the client-side and then compute the tree hash. You can compare it with the checksum Glacier returns in response to your describe job request to verify that the entire byte range you have downloaded is the same as the byte range that is stored in Glacier. @@ -191 +191 @@ The example performs the following tasks: -S3 Glacier sends a notification to this topic after it completes the job. +Glacier sends a notification to this topic after it completes the job. @@ -199 +199 @@ The example attaches a policy to the queue to enable the Amazon SNS topic to pos -In the job request, the example specifies the Amazon SNS topic so that S3 Glacier can send a message after it completes the job. +In the job request, the example specifies the Amazon SNS topic so that Glacier can send a message after it completes the job. @@ -238 +238 @@ If there is a message, parse the JSON and check if the job completed successfull - " \"Version\" : \"2012-10-17\"," + + " \"Version\" : \"2012-10-17\",&TCX5-2025-waiver;" + @@ -410 +410 @@ If there is a message, parse the JSON and check if the job completed successfull -The following C# code example retrieves an archive from S3 Glacier. The code example downloads the job output in chunks by specifying the byte range in a `GetJobOutputRequest` object. +The following C# code example retrieves an archive from Glacier. The code example downloads the job output in chunks by specifying the byte range in a `GetJobOutputRequest` object. @@ -442 +442 @@ The following C# code example retrieves an archive from S3 Glacier. The code exa - " \"Version\" : \"2012-10-17\"," + + " \"Version\" : \"2012-10-17\",&TCX5-2025-waiver;" +