AWS AmazonS3 documentation change
Summary
Added a section about managing public access to buckets and expanded documentation on using tags for cost allocation and attribute-based access control (ABAC).
Security assessment
The changes emphasize using tags for access control (ABAC), which is a security feature, but there is no evidence of addressing a specific security vulnerability. The updates improve documentation about existing security practices.
Diff
diff --git a/AmazonS3/latest/userguide/UsingBucket.md b/AmazonS3/latest/userguide/UsingBucket.md index a03943fe4..e395ef91d 100644 --- a//AmazonS3/latest/userguide/UsingBucket.md +++ b//AmazonS3/latest/userguide/UsingBucket.md @@ -5 +5 @@ -General purpose buckets overviewCommon general purpose bucket patternsPermissionsManaging public access to general purpose bucketsGeneral purpose buckets configurationGeneral purpose buckets operationsGeneral purpose buckets performance monitoring +General purpose buckets overviewCommon general purpose bucket patternsPermissionsManaging public access to general purpose bucketsManaging public access to general purpose bucketsGeneral purpose buckets configurationGeneral purpose buckets operationsGeneral purpose buckets performance monitoring @@ -24,0 +25,2 @@ The following sections provide more information about general purpose buckets, i + * Managing public access to general purpose buckets + @@ -99,0 +102,6 @@ In some rare cases, requests can also fail because of an AWS Region outage. +## Managing public access to general purpose buckets + +You can add tags to your Amazon S3 buckets to categorize and track your AWS costs or for access control. You can use tags as cost allocation tags to track storage costs in AWS Billing and Cost Management. You can also use tags for attribute-based access control (ABAC), to scale access permissions and grant access to S3 buckets based on their tags. + +For more information, see [Using tags with S3 general purpose buckets](./buckets-tagging.html) + @@ -121 +129 @@ _requestPayment_ | By default, the AWS account that creates the bucket (the buc -_tagging_ | You can add cost allocation tags to your bucket to categorize and track your AWS costs. Amazon S3 provides the _tagging_ subresource to store and manage tags on a bucket. Using tags you apply to your bucket, AWS generates a cost allocation report with usage and costs aggregated by your tags. For more information, see [Billing and usage reporting for Amazon S3](./BucketBilling.html). +_tagging_ | You can add tags to your Amazon S3 buckets to categorize and track your AWS costs or for access control. You can use tags as cost allocation tags to track storage costs in AWS Billing and Cost Management. You can also use tags for attribute-based access control (ABAC), to scale access permissions and grant access to S3 buckets based on their tags. For more information, see [Using tags with S3 general purpose buckets](./buckets-tagging.html).