AWS AmazonS3 medium security documentation change
Summary
Added documentation for conditional deletes in S3 (using ETag and if-match headers) and Batch Operations management features.
Security assessment
The conditional deletes feature addresses accidental deletion risks in high-concurrency scenarios by enforcing ETag validation. This directly enhances data integrity and prevents unintended data loss, which is a security concern.
Diff
diff --git a/AmazonS3/latest/userguide/WhatsNew.md b/AmazonS3/latest/userguide/WhatsNew.md index f0e3218f0..e484c066b 100644 --- a//AmazonS3/latest/userguide/WhatsNew.md +++ b//AmazonS3/latest/userguide/WhatsNew.md @@ -17,0 +18,2 @@ Change| Description| Date +Amazon S3 now supports conditional deletes in general purpose buckets | Amazon S3 now supports conditional deletes in general purpose buckets. Conditional deletes verify that an object is unchanged before deleting it. Using conditional deletes helps you to prevent accidental deletions in high-concurrency, multiple-writer scenarios. You can now perform conditional deletes using the HTTP `if-match` header with an ETag value. Amazon S3 only allows your delete request to succeed if the Etag provided matches that of the object. Additionally, you can use the `s3:if-match` condition key in your S3 bucket policies to enforce conditional delete operations. For example, you can require clients to use the HTTP `if-match` header in both `DeleteObject` and `DeleteObjects` API operation requests, helping you to minimize the risk of accidentally deleting objects in your bucket. For more information, see [How to perform conditional deletes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-deletes.html).| September 16, 2025 +Amazon S3 Batch Operations now supports managing objects within an S3 bucket, prefix, suffix, or more, in a single step in the Amazon S3 console | When creating an S3 Batch Operations job, you can specify the objects on which to perform the operation. With this feature, you can instead specify an entire bucket, prefix, suffix, creation date, or storage class. Batch Operations will then apply the operation to all the matching objects and notify you when the job is finished. For more information, see [ Performing object operations in bulk with Batch Operations](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops.html). | September 15, 2025