AWS elasticbeanstalk documentation change
Summary
Updated Tomcat platform documentation to differentiate between pre/post March 2025 environment variable access methods and added secrets handling guidance
Security assessment
Clarifies secure access methods for environment variables and secrets in Tomcat platforms, but doesn't reference any specific security vulnerability being patched. Enhances security documentation rather than addressing a known issue.
Diff
diff --git a/elasticbeanstalk/latest/dg/java-tomcat-platform.md b/elasticbeanstalk/latest/dg/java-tomcat-platform.md index 323a9d827..7183cd014 100644 --- a/elasticbeanstalk/latest/dg/java-tomcat-platform.md +++ b/elasticbeanstalk/latest/dg/java-tomcat-platform.md @@ -134 +134 @@ For more information about using Amazon RDS with your Java application, see [Add -Inside the Tomcat environment running in Elastic Beanstalk, environment variables are accessible using the `System.getProperty()`. For example, you could read a property named `API_ENDPOINT` to a variable with the following code. +For Tomcat platform versions released prior to [March 26, 2025](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/release-2025-03-26-windows.html), environment variables are accessible using `System.getProperty()`. For example, you could read a property named `API_ENDPOINT` from a variable with the following code. @@ -139 +139,6 @@ Inside the Tomcat environment running in Elastic Beanstalk, environment variable -See [Environment properties and other software settings](./environments-cfg-softwaresettings.html) for more information. +Tomcat platform versions released on or after [March 26, 2025](https://docs.aws.amazon.com/elasticbeanstalk/latest/relnotes/release-2025-03-26-windows.html), can also use `System.getenv` to access plaintext environment variables. You can continue to use `System.getProperty` to access plaintext environment variables. However, [environment variables stored as secrets](./AWSHowTo.secrets.env-vars.html) are only available using `System.getenv`. For example, you could read an environment variable named `API_KEY` with the following code. + + + String apiKey = System.getenv("API_KEY"); + +See [Environment variables and other software settings](./environments-cfg-softwaresettings.html) for more information.