AWS AmazonS3 documentation change
Summary
Reorganized metadata fields in S3 Inventory reports, clarified default vs. optional fields, added 'Checksum algorithm' and 'Object owner' fields, and restructured content about encryption/security-related fields.
Security assessment
The change adds documentation for security-related features like 'Checksum algorithm' (data integrity) and 'S3 Bucket Key status' (encryption configuration), but there is no evidence of addressing a specific vulnerability. The restructuring improves clarity about security-relevant metadata but does not indicate a security fix.
Diff
diff --git a/AmazonS3/latest/userguide/storage-inventory.md b/AmazonS3/latest/userguide/storage-inventory.md index 9f7b72372..d3d228a7f 100644 --- a//AmazonS3/latest/userguide/storage-inventory.md +++ b//AmazonS3/latest/userguide/storage-inventory.md @@ -89 +89 @@ Objects in Amazon S3 Inventory reports aren't guaranteed to be sorted in any ord -An inventory list file contains a list of the objects in the source bucket and metadata for each listed object: +An inventory list file contains a list of the objects in the source bucket and metadata for each listed object. These default fields are always included: @@ -93,7 +93 @@ An inventory list file contains a list of the objects in the source bucket and m - * **Key name** – The object key name (or key) that uniquely identifies the object in the bucket. When you're using the CSV file format, the key name is URL-encoded and must be decoded before you can use it. - - * **Version ID** – The object version ID. When you enable versioning on a bucket, Amazon S3 assigns a version number to objects that are added to the bucket. For more information, see [Retaining multiple versions of objects with S3 Versioning](./Versioning.html). (This field is not included if the list is configured only for the current version of the objects.) - - * **IsLatest** – Set to `True` if the object is the current version of the object. (This field is not included if the list is configured only for the current version of the objects.) - - * **Delete marker** – Set to `True` if the object is a delete marker. For more information, see [Retaining multiple versions of objects with S3 Versioning](./Versioning.html). (This field is automatically added to your report if you've configured the report to include all versions of your objects). + * **ETag** – The entity tag (ETag) is a hash of the object. The ETag reflects changes only to the contents of an object, not to its metadata. The ETag can be an MD5 digest of the object data. Whether it is depends on how the object was created and how it is encrypted. For more information, see [Object](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Object.html) in the _Amazon Simple Storage Service API Reference_. @@ -101 +95 @@ An inventory list file contains a list of the objects in the source bucket and m - * **Size** – The object size in bytes, not including the size of incomplete multipart uploads, object metadata, and delete markers. + * **Key name** – The object key name (or key) that uniquely identifies the object in the bucket. When you're using the CSV file format, the key name is URL-encoded and must be decoded before you can use it. @@ -105 +99 @@ An inventory list file contains a list of the objects in the source bucket and m - * **ETag** – The entity tag (ETag) is a hash of the object. The ETag reflects changes only to the contents of an object, not to its metadata. The ETag can be an MD5 digest of the object data. Whether it is depends on how the object was created and how it is encrypted. For more information, see [Object](https://docs.aws.amazon.com/AmazonS3/latest/API/API_Object.html) in the _Amazon Simple Storage Service API Reference_. + * **Size** – The object size in bytes, not including the size of incomplete multipart uploads, object metadata, and delete markers. @@ -113 +106,0 @@ S3 Inventory does not support S3 Express One Zone. - * **Multipart upload flag** – Set to `True` if the object was uploaded as a multipart upload. For more information, see [Uploading and copying objects using multipart upload in Amazon S3](./mpuoverview.html). @@ -115 +108,5 @@ S3 Inventory does not support S3 Express One Zone. - * **Replication status** – Set to `PENDING`, `COMPLETED`, `FAILED`, or `REPLICA`. For more information, see [Getting replication status information](./replication-status.html). + + +You can choose to include the following additional metadata fields in the report: + + * **Checksum algorithm** – Indicates the algorithm that's used to create the checksum for the object. For more information, see [Using supported checksum algorithms](./checking-object-integrity-upload.html#using-additional-checksums). @@ -118,0 +116,2 @@ S3 Inventory does not support S3 Express One Zone. + * **S3 Intelligent-Tiering access tier** – Access tier (frequent or infrequent) of the object if it is stored in the S3 Intelligent-Tiering storage class. Set to `FREQUENT`, `INFREQUENT`, `ARCHIVE_INSTANT_ACCESS`, `ARCHIVE`, or `DEEP_ARCHIVE`. For more information, see [Storage class for automatically optimizing data with changing or unknown access patterns](./storage-class-intro.html#sc-dynamic-data-access). + @@ -125 +124 @@ S3 Inventory does not support S3 Express One Zone. - * **S3 Intelligent-Tiering access tier** – Access tier (frequent or infrequent) of the object if it is stored in the S3 Intelligent-Tiering storage class. Set to `FREQUENT`, `INFREQUENT`, `ARCHIVE_INSTANT_ACCESS`, `ARCHIVE`, or `DEEP_ARCHIVE`. For more information, see [Storage class for automatically optimizing data with changing or unknown access patterns](./storage-class-intro.html#sc-dynamic-data-access). + * **Version ID** – The object version ID. When you enable versioning on a bucket, Amazon S3 assigns a version number to objects that are added to the bucket. For more information, see [Retaining multiple versions of objects with S3 Versioning](./Versioning.html). (This field is not included if the list is configured only for the current version of the objects.) @@ -127 +126 @@ S3 Inventory does not support S3 Express One Zone. - * **S3 Bucket Key status** – Set to `ENABLED` or `DISABLED`. Indicates whether the object uses an S3 Bucket Key for SSE-KMS. For more information, see [Using Amazon S3 Bucket Keys](./bucket-key.html). + * **IsLatest** – Set to `True` if the object is the current version of the object. (This field is not included if the list is configured only for the current version of the objects.) @@ -129 +128,9 @@ S3 Inventory does not support S3 Express One Zone. - * **Checksum algorithm** – Indicates the algorithm that's used to create the checksum for the object. For more information, see [Using supported checksum algorithms](./checking-object-integrity-upload.html#using-additional-checksums). + * **Delete marker** – Set to `True` if the object is a delete marker. For more information, see [Retaining multiple versions of objects with S3 Versioning](./Versioning.html). (This field is automatically added to your report if you've configured the report to include all versions of your objects). + + * **Multipart upload flag** – Set to `True` if the object was uploaded as a multipart upload. For more information, see [Uploading and copying objects using multipart upload in Amazon S3](./mpuoverview.html). + + * **Object owner** – The canonical user ID of the owner of the object. For more information, see [Find the canonical user ID for your AWS account ](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-identifiers.html#FindCanonicalId) in the _AWS Account Management Reference Guide_. + + * **Replication status** – Set to `PENDING`, `COMPLETED`, `FAILED`, or `REPLICA`. For more information, see [Getting replication status information](./replication-status.html). + + * **S3 Bucket Key status** – Set to `ENABLED` or `DISABLED`. Indicates whether the object uses an S3 Bucket Key for SSE-KMS. For more information, see [Using Amazon S3 Bucket Keys](./bucket-key.html). @@ -155,2 +161,0 @@ To get the decoded value in JSON for the Object ACL field, you can query this fi - * **Object owner** – The canonical user ID of the owner of the object. For more information, see [Find the canonical user ID for your AWS account ](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-identifiers.html#FindCanonicalId) in the _AWS Account Management Reference Guide_. -