AWS datasync documentation change

Service: datasync · 2025-10-01 · Documentation low

File: datasync/latest/userguide/s3-cross-account-transfer.md

Summary

Removed detailed JSON bucket policy examples and replaced with placeholder markers

Security assessment

The change removes specific IAM policy examples but doesn't indicate a security vulnerability fix. This appears to be content reorganization rather than addressing security issues.

Diff

diff --git a/datasync/latest/userguide/s3-cross-account-transfer.md b/datasync/latest/userguide/s3-cross-account-transfer.md
index 20ec9ca3e..a7d980e2d 100644
--- a//datasync/latest/userguide/s3-cross-account-transfer.md
+++ b//datasync/latest/userguide/s3-cross-account-transfer.md
@@ -233,39 +233,7 @@ The value for `aws:ResourceAccount` should be the account ID that owns the Amazo
-                {
-         "Version": "2012-10-17",
-         "Statement": [
-             {
-                 "Action": [
-                     "s3:GetBucketLocation",
-                     "s3:ListBucket",
-                     "s3:ListBucketMultipartUploads"
-                 ],
-                 "Effect": "Allow",
-                 "Resource": "arn:aws:s3:::amzn-s3-demo-destination-bucket"
-                 "Condition": {
-                     "StringEquals": {
-                      "aws:ResourceAccount": "123456789012"
-                     }
-                 }
-             },
-             {
-                 "Action": [
-                     "s3:AbortMultipartUpload",
-                     "s3:DeleteObject",
-                     "s3:GetObject",
-                     "s3:GetObjectTagging",
-                     "s3:GetObjectVersion",
-                     "s3:GetObjectVersionTagging",
-                     "s3:ListMultipartUploadParts",
-                     "s3:PutObject",
-                     "s3:PutObjectTagging"
-                   ],
-                 "Effect": "Allow",
-                 "Resource": "arn:aws:s3:::amzn-s3-demo-destination-bucket/*"
-                 "Condition": {
-                     "StringEquals": {
-                         "aws:ResourceAccount": "123456789012"
-                     }
-                 }
-             }
-         ]
-        }
+JSON
+    
+
+****
+    
+        
+                
@@ -302,28 +270,7 @@ In your destination account, modify the destination S3 bucket policy to include
-                {
-          "Version": "2008-10-17",
-          "Statement": [
-            {
-              "Sid": "DataSyncCreateS3LocationAndTaskAccess",
-              "Effect": "Allow",
-              "Principal": {
-                "AWS": "arn:aws:iam::source-account:role/source-datasync-role"
-              },
-              "Action": [
-                "s3:GetBucketLocation",
-                "s3:ListBucket",
-                "s3:ListBucketMultipartUploads",
-                "s3:AbortMultipartUpload",
-                "s3:DeleteObject",
-                "s3:GetObject",
-                "s3:ListMultipartUploadParts",
-                "s3:PutObject",
-                "s3:GetObjectTagging",
-                "s3:PutObjectTagging"
-              ],
-              "Resource": [
-                "arn:aws:s3:::amzn-s3-demo-destination-bucket",
-                "arn:aws:s3:::amzn-s3-demo-destination-bucket/*"
-              ]
-            }
-          ]
-        }
+JSON
+    
+
+****
+    
+        
+