AWS AWSEC2 documentation change
Summary
Updated documentation for setting up S3 Files with EC2 instances, including rephrasing for clarity, restructuring step-by-step instructions, adding sub-steps for network configuration, updating installation commands for amazon-efs-utils package, and improving overall readability.
Security assessment
The changes are primarily editorial improvements and procedural clarifications. No evidence of addressing security vulnerabilities, weaknesses, or incidents. The changes mention existing security requirements (IAM roles, security groups) but do not introduce new security features or address specific security issues. The security group clarification (singular vs plural) and IAM permission references are routine documentation updates.
Diff
diff --git a/AWSEC2/latest/UserGuide/AmazonS3.md b/AWSEC2/latest/UserGuide/AmazonS3.md index d6287294b..2633fbfff 100644 --- a//AWSEC2/latest/UserGuide/AmazonS3.md +++ b//AWSEC2/latest/UserGuide/AmazonS3.md @@ -24 +24 @@ There are two ways to access Amazon S3 data from your Amazon EC2 instances: -Amazon S3 Files is a serverless file system that lets you mount your S3 general purpose bucket as a high performance file system on your compute instance. S3 Files provides access to your S3 objects as files using standard file system operations such as read and write on the local mount path. +Amazon S3 Files is a serverless file system that lets you mount your S3 general purpose bucket as a high performance file system on your compute instance. With S3 Files, you can access your S3 objects as files by using standard file system operations such as read and write on the local mount path. @@ -34 +34 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - * An EC2 instance running Linux OS with an instance profile attached to it. For information about the required permissions to mount the file system, see [IAM roles and policies ](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam) in the _Amazon S3 User Guide_. + * An EC2 Linux instance with an instance profile attached to it. For information about the required permissions to mount the file system, see [IAM roles and policies ](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam) in the _Amazon S3 User Guide_. @@ -36 +36 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - * Security groups that allow NFS traffic (port 2049) between your instance and the file system’s mount targets. For information about the required security groups settings, see [Security groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-security-groups) in the _Amazon S3 User Guide_. + * Security groups that allow NFS traffic (port 2049) between your instance and the file system’s mount targets. For information about the required security group settings, see [Security groups](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-security-groups) in the _Amazon S3 User Guide_. @@ -47 +47 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 3. Select a subnet under **Network settings**. + 3. Under **Network settings** , do the following: @@ -49 +49,5 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 4. Select the default security group to make sure that your EC2 instance can access your S3 file system. You can't access your EC2 instance by Secure Shell (SSH) using this security group. For access by SSH, later you can edit the default security and add a rule to allow SSH or a new security group that allows SSH. You can use the following settings: + 1. Choose **Edit**. + + 2. For **Subnet** , select a subnet. + + 3. Select the default security group to make sure that your EC2 instance can access your S3 file system. You can't access your EC2 instance by Secure Shell (SSH) using this security group. For access by SSH, you can later edit the default security group and add a rule to allow SSH, or add a new security group that allows SSH. You can use the following settings: @@ -59 +63,3 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 5. Under **Storage** , select **File systems** and choose **S3 Files**. + 4. Under **Configure storage** , do the following: + + 1. Under **File systems** , choose **S3 Files**. @@ -61 +67 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 1. Under the file system dropdown, you will see your file systems in the Availability Zone based on the subnet you selected in your Network settings. Choose the S3 file system that you want to mount. If you don’t have any file systems, choose **Create a new file system** to create a new one. + 2. Choose **Add shared file system**. @@ -63 +69 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 2. Enter a local mount path on your EC2 instance where you want to mount the file system (for example, `/mnt/s3files`). + 3. For **S3 file system** , your file systems appear in the Availability Zone based on the subnet that you selected in your Network settings. Choose the S3 file system that you want to mount. If you don’t have any file systems, choose **Create a new file system** to create a new one. @@ -65 +71 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 3. A command will be generated to mount the file system and add it to fstab. You can add this command to the **User data** field under **Advanced details**. Your EC2 instance will then be configured to mount the S3 file system at launch and whenever it's rebooted. You can also run these commands in your EC2 instance after it is launched. + 4. Enter a local mount path on your EC2 instance where you want to mount the file system (for example, `/mnt/s3files`). @@ -67 +73 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 6. Under **Advanced details** , attach an instance profile to your instance. Your IAM role must have permissions to mount the file system and access the S3 bucket. [Learn more about required permissions](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam). + 5. A command will be generated to mount the file system and add it to fstab. You can add this command to the **User data** field under **Advanced details**. Your EC2 instance will then be configured to mount the S3 file system at launch and whenever it's rebooted. You can also run these commands in your EC2 instance after it is launched. @@ -69 +75 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 7. Choose **Launch instance**. + 5. Under **Advanced details** , attach an instance profile to your instance. Your IAM role must have permissions to mount the file system and access the S3 bucket. For more information about the required permissions, see [IAM roles and policies](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam) in the _Amazon S3 User Guide_. @@ -71 +77,3 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 8. After the instance launches, the required software utilities will be installed and file system mounted. You can view the file system by navigating to your local mount path. + 6. Choose **Launch instance**. + +After the instance launches, the required software utilities are installed and the file system is mounted. You can view the file system by navigating to your local mount path. @@ -80 +88 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 2. You mount your S3 file system using a mount helper utility `amazon-efs-utils`. Install the `amazon-efs-utils` package using the following command: + 2. To mount your S3 file system, use the mount helper utility `amazon-efs-utils`. Depending on your Linux distribution, use one of the following commands to install the `amazon-efs-utils` package: @@ -86 +94 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 2. If you are using other [supported Linux distributions](https://github.com/aws/efs-utils/?tab=readme-ov-file#efs-utils), you can do the following: + 2. If you are using other [supported Linux distributions](https://github.com/aws/efs-utils/?tab=readme-ov-file#efs-utils), run the following command: @@ -102 +110 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow - 5. Confirm the file system is mounted. + 5. Confirm the file system is mounted: @@ -109 +117,3 @@ Before you set up S3 Files with your EC2 instance, make sure you have the follow -You can now read and write S3 objects as files on your local mount path using standard file system operations. If you have objects in your S3 bucket then you can view them as files using the following commands. +###### To view objects in your S3 bucket as files + +Having completed the preceding procedures, you can now read and write S3 objects as files on your local mount path using standard file system operations. If you have objects in your S3 bucket, you can view them as files by using the following command: @@ -116 +126 @@ You can now read and write S3 objects as files on your local mount path using st -You can copy files to and from Amazon S3 using the S3 API, AWS CLI, AWS SDKs, or standard HTTP tools. If you have permission, you can copy a file to or from Amazon S3 and your instance using one of the following methods. +You can copy files to and from Amazon S3 using the S3 API, AWS CLI, AWS SDKs, or standard HTTP tools. If you have the required permissions, you can copy a file to or from Amazon S3 and your instance using one of the following methods. @@ -125 +135 @@ This method works for public objects only. If the object is not public, you rece -The **wget** utility is an HTTP and FTP client that allows you to download public objects from Amazon S3. It is installed by default in Amazon Linux and most other distributions, and available for download on Windows. To download an Amazon S3 object, use the following command, substituting the URL of the object to download. +The **wget** utility is an HTTP and FTP client that you can use to download public objects from Amazon S3. It is installed by default in Amazon Linux and most other distributions, and available for download on Windows. To download an Amazon S3 object, use the following command, substituting the URL of the object to download.