AWS AmazonS3 documentation change
Summary
Added IAM permission requirement (s3:GetObjectVersionAnnotationForReplication) for replicating object annotations.
Security assessment
This documents a security control (IAM permissions) required for a new feature (annotation replication) but doesn't address a specific vulnerability. It proactively informs users about necessary permissions for secure configuration.
Diff
diff --git a/AmazonS3/latest/userguide/replication-walkthrough1.md b/AmazonS3/latest/userguide/replication-walkthrough1.md index d428033e8..ecabbb630 100644 --- a//AmazonS3/latest/userguide/replication-walkthrough1.md +++ b//AmazonS3/latest/userguide/replication-walkthrough1.md @@ -304,0 +305,2 @@ JSON + * To replicate object annotations, you must also grant `s3:GetObjectVersionAnnotationForReplication` on the source S3 bucket in the IAM role permissions policy. For more information, see [Replicating metadata changes with replica modification sync](./replication-for-metadata-changes.html). +