AWS AmazonS3 documentation change
Summary
Updated gateway endpoint documentation to emphasize network optimization (AWS network traffic routing), replaced Local Zones references with Availability Zones, added IP address type configuration options (IPv4/IPv6/Dualstack), and reordered steps in endpoint creation process.
Security assessment
The changes primarily focus on network performance optimization and IP address configuration options rather than addressing security vulnerabilities. While IP address type selection (IPv4/IPv6) can have security implications, the documentation update does not explicitly mention security risks, mitigations, or vulnerabilities. The modifications appear to be feature enhancements and clarifications rather than security-focused updates.
Diff
diff --git a/AmazonS3/latest/userguide/connectivity-lz-directory-buckets.md b/AmazonS3/latest/userguide/connectivity-lz-directory-buckets.md index 614577f5e..70801ad5f 100644 --- a//AmazonS3/latest/userguide/connectivity-lz-directory-buckets.md +++ b//AmazonS3/latest/userguide/connectivity-lz-directory-buckets.md @@ -7 +7 @@ -You can use a gateway endpoint to access directory buckets in AWS Local Zones (Local Zones) from your virtual private cloud (VPC), without requiring an internet gateway or NAT device for your VPC, and at no additional cost. The following topic describes configuring gateway VPC endpoints between your VPC and directory buckets in Local Zones. +To reduce the amount of time your packets spend on the network, configure your virtual private cloud (VPC) with a gateway endpoint to access directory buckets in Availability Zones while keeping traffic within the AWS network, and at no additional cost. @@ -25 +25 @@ You can use a gateway endpoint to access directory buckets in AWS Local Zones (L - 8. For **Route tables** , select the route table on your Local Zone to be used by the endpoint. After the endpoint is created, a route record will be added to the route table that you select in this step. + 8. For **Route tables** , choose the route table on your Local Zone to be used by the endpoint. After the endpoint is created, a route record will be added to the route table that you select in this step. @@ -29 +29 @@ You can use a gateway endpoint to access directory buckets in AWS Local Zones (L - 10. (Optional) To add a tag, choose **Add new tag** , and enter the tag key and the tag value. + 10. For **IP address type** , choose from the following options: @@ -31 +31,9 @@ You can use a gateway endpoint to access directory buckets in AWS Local Zones (L - 11. Choose **Create endpoint**. + * **IPv4** – Assign IPv4 addresses to the endpoint network interfaces. This option is supported only if all selected subnets have IPv4 address ranges and the service accepts IPv4 requests. + + * **IPv6** – Assign IPv6 addresses to the endpoint network interfaces. This option is supported only if all selected subnets are IPv6 only subnets and the service accepts IPv6 requests. + + * **Dualstack** – Assign both IPv4 and IPv6 addresses to the endpoint network interfaces. This option is supported only if all selected subnets have both IPv4 and IPv6 address ranges and the service accepts both IPv4 and IPv6 requests. + + 11. (Optional) To add a tag, choose **Add new tag** , and enter the tag key and the tag value. + + 12. Choose **Create endpoint**.