AWS AWSEC2 documentation change
Summary
Updated documentation for Amazon S3 access from EC2 instances with formatting changes, clearer prerequisites, and improved instructions for mounting S3 file systems at launch and after launch
Security assessment
The changes are primarily editorial improvements, formatting updates (hyphens to en dashes), and clearer language. No security vulnerabilities, weaknesses, or incidents are mentioned. The changes reference existing security documentation (IAM roles, security groups) but don't add new security content. The security implications are minimal - the documentation now more clearly references existing security requirements for mounting S3 file systems, but this doesn't indicate a security issue was addressed.
Diff
diff --git a/AWSEC2/latest/UserGuide/AmazonS3.md b/AWSEC2/latest/UserGuide/AmazonS3.md index b881bf977..95d48051d 100644 --- a//AWSEC2/latest/UserGuide/AmazonS3.md +++ b//AWSEC2/latest/UserGuide/AmazonS3.md @@ -13 +13 @@ There are two ways to access Amazon S3 data from your Amazon EC2 instances: - * **File access** \- Use [Amazon S3 Files](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files.html) to mount an S3 bucket as a high performance file system on your instance. + * **File access** – Use [Amazon S3 Files](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files.html) to mount an S3 bucket as a high performance file system on your instance. @@ -15 +15 @@ There are two ways to access Amazon S3 data from your Amazon EC2 instances: - * **Object access** \- Use the [Amazon S3 API](https://docs.aws.amazon.com/AmazonS3/latest/API/), AWS CLI, AWS SDKs, or tools like wget to copy objects to and from S3. + * **Object access** – Use the [Amazon S3 API](https://docs.aws.amazon.com/AmazonS3/latest/API/), AWS CLI, AWS SDKs, or tools like wget to copy objects to and from S3. @@ -23,0 +24,2 @@ Amazon S3 Files is a serverless file system that lets you mount your S3 general +You can mount an S3 file system to an EC2 instance either at launch, or after launch on a running instance. + @@ -28,5 +30 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - * You must have an S3 file system and at least one mount target in available state. For instructions on creating an S3 file system, see the [Amazon S3 Files User Guide](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files.html). - - * An EC2 instance running Linux OS with an instance profile attached to it. Learn more about required permissions to mount the file system. - - * Security groups that allow NFS traffic (port 2049) between your instance and the file system’s mount targets. [Learn more about required security groups settings.](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-security-groups) + * An S3 file system and at least one mount target in the available state. For information about creating an S3 file system, see [Working with Amazon S3 Files](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files.html) in the _Amazon S3 User Guide_. @@ -33,0 +32 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow + * An EC2 instance running Linux OS with an instance profile attached to it. For information about the required permissions to mount the file system, see [IAM roles and policies ](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam) in the _Amazon S3 User Guide_. @@ -34,0 +34 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow + * Security groups that allow NFS traffic (port 2049) between your instance and the file system’s mount targets. For information about the required security groups settings, see [Security groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-security-groups) in the _Amazon S3 User Guide_. @@ -37 +36,0 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow -###### Mount S3 file system to an EC2 instance @@ -39 +37,0 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow -You can either mount an S3 file system at launch or after launch on a running instance. @@ -41 +39 @@ You can either mount an S3 file system at launch or after launch on a running in -###### Mount a file system at instance launch using the EC2 console +###### To mount a file system to an EC2 instance at launch using the EC2 console @@ -65 +63 @@ You can either mount an S3 file system at launch or after launch on a running in - 3. A command will be generated to mount the file system and add it to fstab. You can add this command to User data field in **Advanced details**. Your EC2 instance will then be configured to mount the S3 file system at launch and whenever it's rebooted. You can also run these commands in your EC2 instance after it is launched. + 3. A command will be generated to mount the file system and add it to fstab. You can add this command to the **User data** field under **Advanced details**. Your EC2 instance will then be configured to mount the S3 file system at launch and whenever it's rebooted. You can also run these commands in your EC2 instance after it is launched. @@ -67 +65 @@ You can either mount an S3 file system at launch or after launch on a running in - 6. Under **Advanced details** , attach an instance profile to your instance. Your IAM role must have permissions to mount the file system and access S3 bucket. [Learn more about required permissions](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam). + 6. Under **Advanced details** , attach an instance profile to your instance. Your IAM role must have permissions to mount the file system and access the S3 bucket. [Learn more about required permissions](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam). @@ -76 +74 @@ You can either mount an S3 file system at launch or after launch on a running in -###### Mount a file system to an Amazon EC2 instance after launch +###### To mount a file system to an EC2 instance after launch @@ -78 +76 @@ You can either mount an S3 file system at launch or after launch on a running in - 1. [Connect to your EC2 instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect.html) through Secure Shell (SSH) or EC2 Instance Connect on EC2 Console. + 1. [Connect to your EC2 instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect.html) through Secure Shell (SSH) or by using EC2 Instance Connect in the EC2 console. @@ -90 +88 @@ You can either mount an S3 file system at launch or after launch on a running in - 3. Refer to the [efs-utils GitHub repository](https://github.com/aws/efs-utils/?tab=readme-ov-file#on-other-linux-distributions) for other Linux distributions. + 3. For other Linux distributions, see the [efs-utils](https://github.com/aws/efs-utils/?tab=readme-ov-file#on-other-linux-distributions) repository on _GitHub_. @@ -92 +90 @@ You can either mount an S3 file system at launch or after launch on a running in - 3. Create a directory for file system mount point using the following command: + 3. Create a directory for the file system mount point using the following command: @@ -148 +146 @@ AWS CLI -You can use the AWS Command Line Interface (AWS CLI) to download restricted items from Amazon S3 and also to upload items. For more information, such as how to install and configure the tools, see the [AWS Command Line Interface detail page](https://aws.amazon.com/cli/). +You can use the AWS Command Line Interface (AWS CLI) to download restricted items from Amazon S3 and to upload items. For more information, such as how to install and configure the tools, see the [AWS Command Line Interface detail page](https://aws.amazon.com/cli/). @@ -152 +150 @@ The [aws s3 cp](https://docs.aws.amazon.com/cli/latest/reference/s3/cp.html) com -Use the following command to copy an object from Amazon S3 to your instance. +Use the following command to copy an object from Amazon S3 to your instance: @@ -157 +155 @@ Use the following command to copy an object from Amazon S3 to your instance. -Use the following command to copy an object from your instance back into Amazon S3. +Use the following command to copy an object from your instance back into Amazon S3: @@ -164 +162 @@ The [aws s3 sync](https://docs.aws.amazon.com/cli/latest/reference/s3/sync.html) -Use the following command to download an entire Amazon S3 bucket to a local directory on your instance. +Use the following command to download an entire Amazon S3 bucket to a local directory on your instance: