AWS AmazonS3 documentation change
Summary
Added new replication failure reasons related to annotation replication errors including permission issues, encryption conflicts, and annotation limits.
Security assessment
The change documents error scenarios for annotation replication that involve security configurations (permission denials, encryption issues) but doesn't indicate any security vulnerability being fixed. It helps diagnose replication failures related to security misconfigurations.
Diff
diff --git a/AmazonS3/latest/userguide/replication-metrics-events.md b/AmazonS3/latest/userguide/replication-metrics-events.md index 57f39e836..b63088a75 100644 --- a//AmazonS3/latest/userguide/replication-metrics-events.md +++ b//AmazonS3/latest/userguide/replication-metrics-events.md @@ -129,0 +130,5 @@ Replication failure reason | Description +`SrcAnnotationNotFound` | Source annotation was not found. The annotation was deleted before replication completed. +`SrcGetObjectAnnotationNotPermitted` | Access denied when retrieving the source annotation for replication. The IAM role is missing `s3:GetObjectVersionAnnotationForReplication`. +`DstPutObjectAnnotationNotPermitted` | Access denied when replicating the annotation to the destination bucket. The IAM role is missing `s3:ReplicateObject` or does not have access to the required AWS KMS key. +`SrcAnnotationEncryptionUnsupported` | The object annotation encryption type is not supported. +`AnnotationLimitExceeded` | The object annotation count exceeds the limit (1000). Replication would exceed the annotation limit on the destination.