AWS Security ChangesHomeSearch

AWS AmazonS3 documentation change

Service: AmazonS3 · 2026-06-22 · Documentation low

File: AmazonS3/latest/userguide/metadata-tables-view-configuration.md

Summary

Added documentation for annotation tables in metadata configuration, including UI references and example JSON output.

Security assessment

The changes introduce annotation tables as a new feature without addressing vulnerabilities or security weaknesses. The added AES256 encryption configuration is standard and not indicative of a security fix.

Diff

diff --git a/AmazonS3/latest/userguide/metadata-tables-view-configuration.md b/AmazonS3/latest/userguide/metadata-tables-view-configuration.md
index 7d8315b90..db0021065 100644
--- a//AmazonS3/latest/userguide/metadata-tables-view-configuration.md
+++ b//AmazonS3/latest/userguide/metadata-tables-view-configuration.md
@@ -11 +11 @@ View a metadata table configuration
-If you've created a metadata table configuration for a general purpose bucket, you can view information about the configuration, such as whether an inventory table has been enabled, or whether journal table record expiration has been enabled. You can also view the status of your journal and inventory tables. 
+If you've created a metadata table configuration for a general purpose bucket, you can view information about the configuration, such as whether an inventory table or annotation table has been enabled, or whether journal table record expiration has been enabled. You can also view the status of your journal, inventory, and annotation tables. 
@@ -27 +27 @@ You can view your metadata table configuration for a general purpose bucket by u
-  5. On the **Metadata** tab, scroll down to the **Metadata configuration** section. In the **Journal table** and **Inventory table** sections, you can view various information for these configurations, such as their Amazon Resource Names (ARNs), the status of your tables, and whether you've enabled journal table record expiration or an inventory table.
+  5. On the **Metadata** tab, scroll down to the **Metadata configuration** section. In the **Journal table** , **Inventory table** , and **Annotation table** sections, you can view various information for these configurations, such as their Amazon Resource Names (ARNs), the status of your tables, and whether you've enabled journal table record expiration, an inventory table, or an annotation table.
@@ -75,0 +76,10 @@ To use the following example command, replace the ``user input placeholders`` wi
+                },
+                "AnnotationTableConfigurationResult": {
+                    "ConfigurationState": "ENABLED",
+                    "TableStatus": "ACTIVE",
+                    "TableName": "annotation",
+                    "TableArn": "arn:aws:s3tables:us-east-2:111122223333:bucket/aws-managed-s3-111122223333-us-east-2/table/f234567-a890-1b2c-d345-e678901f2345",
+                    "EncryptionConfiguration": {
+                        "SseAlgorithm": "AES256"
+                    },
+                    "Role": "arn:aws:iam::111122223333:role/annotation-table-role"