AWS AWSCloudFormation documentation change
Summary
Clarified protocol inspection behavior and added note about TCP-only support
Security assessment
Change describes TLS inspection configuration behavior but does not address a specific security vulnerability. TLS inspection is a security feature, but this is a documentation clarification.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificatescope.md b/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificatescope.md index 23164383a..792184735 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificatescope.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-tlsinspectionconfiguration-servercertificatescope.md @@ -69 +69,3 @@ _Required_ : No -The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number (IANA). Network Firewall currently supports only TCP. +The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol. + +Network Firewall currently supports only TCP.