AWS amazonglacier documentation change
Summary
Updated service name references from 'S3 Glacier' to 'Glacier' throughout the document, removed redundant 'S3' branding in storage class references, and adjusted links/headings accordingly.
Security assessment
The changes are purely branding/naming updates (removing 'S3' from service names) without altering security guidance, IAM policy examples, or access control mechanisms. No evidence of addressing vulnerabilities or modifying security controls.
Diff
diff --git a/amazonglacier/latest/dev/security_iam_service-with-iam.md b/amazonglacier/latest/dev/security_iam_service-with-iam.md index cd85bf3d8..080000376 100644 --- a//amazonglacier/latest/dev/security_iam_service-with-iam.md +++ b//amazonglacier/latest/dev/security_iam_service-with-iam.md @@ -7 +7 @@ Identity-based policiesResource-based policiesPolicy actionsPolicy resourcesPoli -**This page is only for existing customers of the S3 Glacier service using Vaults and the original REST API from 2012.** +**This page is only for existing customers of the Glacier service using Vaults and the original REST API from 2012.** @@ -9 +9 @@ Identity-based policiesResource-based policiesPolicy actionsPolicy resourcesPoli -If you're looking for archival storage solutions we suggest using the S3 Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [S3 Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using S3 Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. +If you're looking for archival storage solutions we suggest using the Glacier storage classes in Amazon S3, **S3 Glacier Instant Retrieval** , **S3 Glacier Flexible Retrieval** , and **S3 Glacier Deep Archive**. To learn more about these storage options, see [Glacier storage classes](https://aws.amazon.com/s3/storage-classes/glacier/) and [Long-term data storage using Glacier storage classes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/glacier-storage-classes) in the _Amazon S3 User Guide_. These storage classes use the Amazon S3 API, are available in all regions, and can be managed within the Amazon S3 console. They offer features like Storage Cost Analysis, Storage Lens, advanced optional encryption features, and more. @@ -11 +11 @@ If you're looking for archival storage solutions we suggest using the S3 Glacier -# How Amazon S3 Glacier works with IAM +# How Amazon Glacier works with IAM @@ -13 +13 @@ If you're looking for archival storage solutions we suggest using the S3 Glacier -Before you use IAM to manage access to S3 Glacier, learn what IAM features are available to use with S3 Glacier. +Before you use IAM to manage access to Glacier, learn what IAM features are available to use with Glacier. @@ -15 +15 @@ Before you use IAM to manage access to S3 Glacier, learn what IAM features are a -IAM features you can use with Amazon S3 Glacier IAM feature | S3 Glacier support +IAM features you can use with Amazon Glacier IAM feature | Glacier support @@ -29 +29 @@ Service-linked roles | No -To get a high-level view of how S3 Glacier and other AWS services work with most IAM features, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. +To get a high-level view of how Glacier and other AWS services work with most IAM features, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. @@ -31 +31 @@ To get a high-level view of how S3 Glacier and other AWS services work with most -## Identity-based policies for S3 Glacier +## Identity-based policies for Glacier @@ -39 +39 @@ With IAM identity-based policies, you can specify allowed or denied actions and -### Identity-based policy examples for S3 Glacier +### Identity-based policy examples for Glacier @@ -41 +41 @@ With IAM identity-based policies, you can specify allowed or denied actions and -To view examples of S3 Glacier identity-based policies, see [Identity-based policy examples for Amazon S3 Glacier](./security_iam_id-based-policy-examples.html). +To view examples of Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). @@ -43 +43 @@ To view examples of S3 Glacier identity-based policies, see [Identity-based poli -## Resource-based policies within S3 Glacier +## Resource-based policies within Glacier @@ -51 +51 @@ To enable cross-account access, you can specify an entire account or IAM entitie -The S3 Glacier service supports only one type of resource-based policy called a _vault policy_ , which is attached to a vault. This policy defines which principals can perform actions on the vault. +The Glacier service supports only one type of resource-based policy called a _vault policy_ , which is attached to a vault. This policy defines which principals can perform actions on the vault. @@ -53 +53 @@ The S3 Glacier service supports only one type of resource-based policy called a -S3 Glacier vault policies manage permissions in the following ways: +Glacier vault policies manage permissions in the following ways: @@ -62 +62 @@ S3 Glacier vault policies manage permissions in the following ways: -### Resource-based policy examples within S3 Glacier +### Resource-based policy examples within Glacier @@ -64 +64 @@ S3 Glacier vault policies manage permissions in the following ways: -To view examples of S3 Glacier resource-based policies, see [Resource-based policy examples for Amazon S3 Glacier](./security_iam_resource-based-policy-examples.html). +To view examples of Glacier resource-based policies, see [Resource-based policy examples for Amazon Glacier](./security_iam_resource-based-policy-examples.html). @@ -66 +66 @@ To view examples of S3 Glacier resource-based policies, see [Resource-based poli -## Policy actions for S3 Glacier +## Policy actions for Glacier @@ -76 +76 @@ Include actions in a policy to grant permissions to perform the associated opera -To see a list of S3 Glacier actions, see [Actions defined by Amazon S3 Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions) in the _Service Authorization Reference_. +To see a list of Glacier actions, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions) in the _Service Authorization Reference_. @@ -78 +78 @@ To see a list of S3 Glacier actions, see [Actions defined by Amazon S3 Glacier]( -Policy actions in S3 Glacier use the following prefix before the action: +Policy actions in Glacier use the following prefix before the action: @@ -97 +97 @@ You can specify multiple actions using wildcards (*). For example, to specify al -To view examples of S3 Glacier identity-based policies, see [Identity-based policy examples for Amazon S3 Glacier](./security_iam_id-based-policy-examples.html). +To view examples of Glacier identity-based policies, see [Identity-based policy examples for Amazon Glacier](./security_iam_id-based-policy-examples.html). @@ -99 +99 @@ To view examples of S3 Glacier identity-based policies, see [Identity-based poli -## Policy resources for S3 Glacier +## Policy resources for Glacier @@ -112 +112 @@ For actions that don't support resource-level permissions, such as listing opera -To see a list of S3 Glacier resource types and their ARNs, see [Resources defined by Amazon S3 Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-resources-for-iam-policies) in the _Service Authorization Reference_. To learn which actions you can specify the ARN of each resource, see [Actions defined by Amazon S3 Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). +To see a list of Glacier resource types and their ARNs, see [Resources defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-resources-for-iam-policies) in the _Service Authorization Reference_. To learn which actions you can specify the ARN of each resource, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). @@ -114 +114 @@ To see a list of S3 Glacier resource types and their ARNs, see [Resources define -In S3 Glacier, the primary resource is a _vault_. S3 Glacier supports policies only at the vault level. That is, in an IAM policy, the `Resource` value that you specify can be a specific vault or a set of vaults in a specific AWS Region. S3 Glacier doesn't support archive-level permissions. +In Glacier, the primary resource is a _vault_. Glacier supports policies only at the vault level. That is, in an IAM policy, the `Resource` value that you specify can be a specific vault or a set of vaults in a specific AWS Region. Glacier doesn't support archive-level permissions. @@ -116 +116 @@ In S3 Glacier, the primary resource is a _vault_. S3 Glacier supports policies o -For all S3 Glacier actions, `Resource` specifies the vault on which you want to grant the permissions. These resources have unique Amazon Resource Names (ARNs) associated with them as shown in the following table, and you can use a wildcard character (*) in the ARN to match vault names that start with the same prefix. +For all Glacier actions, `Resource` specifies the vault on which you want to grant the permissions. These resources have unique Amazon Resource Names (ARNs) associated with them as shown in the following table, and you can use a wildcard character (*) in the ARN to match vault names that start with the same prefix. @@ -123 +123 @@ Vaults with names starting with "example" | `arn:aws:glacier:`region`:`account-i -S3 Glacier provides a set of operations to work with the S3 Glacier resources. For information on the available operations, see [API Reference for Amazon S3 Glacier](./amazon-glacier-api.html). +Glacier provides a set of operations to work with the Glacier resources. For information on the available operations, see [API Reference for Amazon Glacier](./amazon-glacier-api.html). @@ -125 +125 @@ S3 Glacier provides a set of operations to work with the S3 Glacier resources. F -Some S3 Glacier API actions support multiple resources. For example, `glacier:AddTagsToVault` accesses examplevault1 and examplevault2, so a principal must have permissions to access both resources. To specify multiple resources in a single statement, separate the ARNs with commas. +Some Glacier API actions support multiple resources. For example, `glacier:AddTagsToVault` accesses examplevault1 and examplevault2, so a principal must have permissions to access both resources. To specify multiple resources in a single statement, separate the ARNs with commas. @@ -134 +134 @@ Some S3 Glacier API actions support multiple resources. For example, `glacier:Ad -## Policy condition keys for S3 Glacier +## Policy condition keys for Glacier @@ -148 +148 @@ AWS supports global condition keys and service-specific condition keys. To see a -To see a list of S3 Glacier condition keys, see [Condition keys for Amazon S3 Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-policy-keys) in the _Service Authorization Reference_. To learn with which actions and resources you can use a condition key, see [Actions defined by Amazon S3 Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). +To see a list of Glacier condition keys, see [Condition keys for Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-policy-keys) in the _Service Authorization Reference_. To learn with which actions and resources you can use a condition key, see [Actions defined by Amazon Glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html#amazons3glacier-actions-as-permissions). @@ -152 +152 @@ For examples of using the glacier–specific condition keys, see [Vault Lock Pol -## ACLs in S3 Glacier +## ACLs in Glacier @@ -158 +158 @@ Access control lists (ACLs) control which principals (account members, users, or -## ABAC with S3 Glacier +## ABAC with Glacier @@ -172 +172 @@ For more information about ABAC, see [Define permissions with ABAC authorization -## Using temporary credentials with S3 Glacier +## Using temporary credentials with Glacier @@ -182 +182 @@ You can manually create temporary credentials using the AWS CLI or AWS API. You -## Cross-service principal permissions for S3 Glacier +## Cross-service principal permissions for Glacier @@ -188 +188 @@ When you use an IAM user or role to perform actions in AWS, you are considered a -## Service roles for S3 Glacier +## Service roles for Glacier @@ -196 +196 @@ A service role is an [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide -Changing the permissions for a service role might break S3 Glacier functionality. Edit service roles only when S3 Glacier provides guidance to do so. +Changing the permissions for a service role might break Glacier functionality. Edit service roles only when Glacier provides guidance to do so. @@ -198 +198 @@ Changing the permissions for a service role might break S3 Glacier functionality -## Service-linked roles for S3 Glacier +## Service-linked roles for Glacier