AWS AmazonS3 documentation change
Summary
Updated VPC endpoint creation steps with Local Zone route table specification, added IP address type options (IPv4/IPv6/Dualstack), and optional tagging
Security assessment
Changes focus on network configuration options and documentation clarity. While IP address types relate to network architecture, there is no explicit mention of security vulnerabilities or security feature enhancements.
Diff
diff --git a/AmazonS3/latest/userguide/s3-express-tutorial-endpoints.md b/AmazonS3/latest/userguide/s3-express-tutorial-endpoints.md index a6844db5f..397d9b7cd 100644 --- a//AmazonS3/latest/userguide/s3-express-tutorial-endpoints.md +++ b//AmazonS3/latest/userguide/s3-express-tutorial-endpoints.md @@ -29 +29 @@ Use the following procedure to create a gateway endpoint that connects to S3 Exp - 8. For **Route tables** , select the route tables to be used by the endpoint. Amazon VPC automatically adds a route that points traffic destined for the service to the endpoint network interface. + 8. For **Route tables** , choose the route table on your Local Zone to be used by the endpoint. After the endpoint is created, a route record will be added to the route table that you select in this step. @@ -31 +31 @@ Use the following procedure to create a gateway endpoint that connects to S3 Exp - 9. For **Policy** , choose **Full access** to allow all operations by all principals on all resources over the VPC endpoint. Otherwise, choose **Custom** to attach a VPC endpoint policy that controls the permissions that principals have to perform actions on resources over the VPC endpoint. + 9. For **Policy** , choose **Full access** to allow all operations by all principals on all resources over the VPC endpoint. Otherwise, choose **Custom** to attach a VPC endpoint policy that controls the principals' permissions to perform actions on resources over the VPC endpoint. @@ -33 +33,11 @@ Use the following procedure to create a gateway endpoint that connects to S3 Exp - 10. Choose **Create endpoint**. + 10. For **IP address type** , choose from the following options: + + * **IPv4** – Assign IPv4 addresses to the endpoint network interfaces. This option is supported only if all selected subnets have IPv4 address ranges and the service accepts IPv4 requests. + + * **IPv6** – Assign IPv6 addresses to the endpoint network interfaces. This option is supported only if all selected subnets are IPv6 only subnets and the service accepts IPv6 requests. + + * **Dualstack** – Assign both IPv4 and IPv6 addresses to the endpoint network interfaces. This option is supported only if all selected subnets have both IPv4 and IPv6 address ranges and the service accepts both IPv4 and IPv6 requests. + + 11. (Optional) To add a tag, choose **Add new tag** , and enter the tag key and the tag value. + + 12. Choose **Create endpoint**.