AWS AmazonS3 documentation change

Service: AmazonS3 · 2026-06-22 · Documentation low

File: AmazonS3/latest/userguide/batch-ops-copy-example-bucket-key.md

Summary

Added 's3:GetObjectAnnotation' and 's3:GetObjectVersionAnnotation' permissions to IAM policy example

Security assessment

This modifies an IAM policy example by adding two new permissions related to object annotations. Since IAM policies enforce access control (a security feature), this updates security documentation. No vulnerability is being addressed.

Diff

diff --git a/AmazonS3/latest/userguide/batch-ops-copy-example-bucket-key.md b/AmazonS3/latest/userguide/batch-ops-copy-example-bucket-key.md
index 2277ef779..8f7239933 100644
--- a//AmazonS3/latest/userguide/batch-ops-copy-example-bucket-key.md
+++ b//AmazonS3/latest/userguide/batch-ops-copy-example-bucket-key.md
@@ -199,6 +198,0 @@ After copying the policy example into your [IAM Console](https://console.aws.ama
-JSON
-    
-
-****
-    
-    
@@ -222 +216,3 @@ JSON
-              "s3:GetObjectVersionTagging"
+              "s3:GetObjectVersionTagging",
+              "s3:GetObjectAnnotation",
+              "s3:GetObjectVersionAnnotation"