AWS singlesignon documentation change
Summary
Fixed URL formatting by adding double slashes in documentation links
Security assessment
The changes only correct URL paths by adding an extra slash in documentation links. There is no evidence of addressing security vulnerabilities or adding new security features. The modifications are purely formatting fixes for existing documentation links.
Diff
diff --git a/singlesignon/latest/userguide/tip-tutorial-s3.md b/singlesignon/latest/userguide/tip-tutorial-s3.md index 6e54e7c1c..f5307c50a 100644 --- a//singlesignon/latest/userguide/tip-tutorial-s3.md +++ b//singlesignon/latest/userguide/tip-tutorial-s3.md @@ -9 +9 @@ PrerequisitesConfiguring S3 Access Grants for trusted identity propagation throu -[Amazon S3 Access Grants](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-get-started.html) provides the flexibility to grant identity-based fine-grain access control to S3 locations. You can use Amazon S3 Access Grants to grant Amazon S3 bucket access directly to your corporate users and groups. Follow these steps to enable S3 Access Grants with IAM Identity Center and achieve trusted identity propagation. +[Amazon S3 Access Grants](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-get-started.html) provides the flexibility to grant identity-based fine-grain access control to S3 locations. You can use Amazon S3 Access Grants to grant Amazon S3 bucket access directly to your corporate users and groups. Follow these steps to enable S3 Access Grants with IAM Identity Center and achieve trusted identity propagation. @@ -24 +24 @@ Before you can get started with this tutorial, you'll need to set up the followi - 1. [Associate your IAM Identity Center instance](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance-idc.html). + 1. [Associate your IAM Identity Center instance](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-instance-idc.html). @@ -33 +33 @@ Before you can get started with this tutorial, you'll need to set up the followi - 1. [**Create an S3 Access Grants instance**](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance-create.html) \- You can create one S3 Access Grants instance per AWS Region. When you create the S3 Access Grants instance, make sure to check the **Add IAM Identity Center instance** box and provide the ARN of your IAM Identity Center instance. Select **Next**. + 1. [**Create an S3 Access Grants instance**](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-instance-create.html) \- You can create one S3 Access Grants instance per AWS Region. When you create the S3 Access Grants instance, make sure to check the **Add IAM Identity Center instance** box and provide the ARN of your IAM Identity Center instance. Select **Next**. @@ -39 +39 @@ The following image shows the Create S3 Access Grants instance page in the Amazo - 2. **Register a location** \- After you create an [create an Amazon S3 Access Grants instance](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance-create.html) in an AWS Region in your account, you [register an S3 location](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location-register.html) in that instance. An S3 Access Grants location maps the default S3 region (`S3://`), a bucket, or a prefix to an IAM role. S3 Access Grants assumes this Amazon S3 role to vend temporary credentials to the grantee that is accessing that particular location. You must first register at least one location in your S3 Access Grants instance before you can create an access grant. + 2. **Register a location** \- After you create an [create an Amazon S3 Access Grants instance](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-instance-create.html) in an AWS Region in your account, you [register an S3 location](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-location-register.html) in that instance. An S3 Access Grants location maps the default S3 region (`S3://`), a bucket, or a prefix to an IAM role. S3 Access Grants assumes this Amazon S3 role to vend temporary credentials to the grantee that is accessing that particular location. You must first register at least one location in your S3 Access Grants instance before you can create an access grant. @@ -41 +41 @@ The following image shows the Create S3 Access Grants instance page in the Amazo -For the **Location scope** , specify `s3://`, which includes all of your buckets in that Region. This is the recommended location scope for most use cases. If you have an advanced access management use case, you can set the location scope to a specific bucket `s3://`bucket``or prefix within a bucket `s3://`bucket`/`prefix-with-path``. For more information, see [Register a location](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location-register.html) in the _Amazon Simple Storage Service User Guide_. +For the **Location scope** , specify `s3://`, which includes all of your buckets in that Region. This is the recommended location scope for most use cases. If you have an advanced access management use case, you can set the location scope to a specific bucket `s3://`bucket``or prefix within a bucket `s3://`bucket`/`prefix-with-path``. For more information, see [Register a location](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-location-register.html) in the _Amazon Simple Storage Service User Guide_. @@ -53 +53 @@ The following example permission policy gives Amazon S3 permissions to the IAM r -To use these policies, replace the `italicized placeholder text` in the example policy with your own information. For additional directions, see [Create a policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) or [Edit a policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-edit.html). +To use these policies, replace the `italicized placeholder text` in the example policy with your own information. For additional directions, see [Create a policy](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_create.html) or [Edit a policy](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_manage-edit.html). @@ -150 +150 @@ JSON -In the IAM role trust policy, give the S3 Access Grants service (`access-grants.s3.amazonaws.com`) principal access to the IAM role that you created. To do so, you can create a JSON file that contains the following statements. To add the trust policy to your account, see [Create a role using custom trust policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-custom.html). +In the IAM role trust policy, give the S3 Access Grants service (`access-grants.s3.amazonaws.com`) principal access to the IAM role that you created. To do so, you can create a JSON file that contains the following statements. To add the trust policy to your account, see [Create a role using custom trust policies](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_roles_create_for-custom.html). @@ -201 +201 @@ JSON -If you have an Amazon S3 Access Grants instance with a registered location and you have associated your IAM Identity Center instance with it, you can [create a grant](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant-create.html). In the S3 console **Create Grant** page, complete the following: +If you have an Amazon S3 Access Grants instance with a registered location and you have associated your IAM Identity Center instance with it, you can [create a grant](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-grant-create.html). In the S3 console **Create Grant** page, complete the following: @@ -205 +205 @@ If you have an Amazon S3 Access Grants instance with a registered location and y - 1. Select the location created in the previous step. You can reduce the scope of the grant by adding a sub-prefix. The sub-prefix can be a `bucket`, `bucket/prefix`, or an object in the bucket. For more information, see [Subprefix](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant-create.html#subprefix) in the _Amazon Simple Storage Service User Guide_. + 1. Select the location created in the previous step. You can reduce the scope of the grant by adding a sub-prefix. The sub-prefix can be a `bucket`, `bucket/prefix`, or an object in the bucket. For more information, see [Subprefix](https://docs.aws.amazon.com//AmazonS3/latest/userguide/access-grants-grant-create.html#subprefix) in the _Amazon Simple Storage Service User Guide_.