AWS AmazonCloudFront documentation change
Summary
Expanded documentation on Anycast static IP use cases, including apex domain support and updated request procedure
Security assessment
Changes clarify usage scenarios and procedural steps without addressing security vulnerabilities or introducing security features
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md b/AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md index 54be0491e..55d421c84 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md +++ b//AmazonCloudFront/latest/DeveloperGuide/request-static-ips.md @@ -9 +9 @@ PrerequisitesRequest an Anycast static IP listCreate an Anycast static IP listAs -You can request Anycast static IPs from CloudFront to use with your distributions. You can allowlist these static IP addresses with network providers to waive data charges for users who access your application, or you can use the static IPs within outbound security firewalls to control traffic exchange with approved applications. These static IPs work with [Server Name Indication (SNI)](https://en.wikipedia.org/wiki/Server_Name_Indication). For more information, see [Use SNI to serve HTTPS requests (works for most clients)](./cnames-https-dedicated-ip-or-sni.html#cnames-https-sni). +You can request Anycast static IPs from CloudFront to use with your distributions. Anycast static IP lists contain IPv4 IP addresses that are dedicated to your AWS account and spread across geographic regions. @@ -11 +11,5 @@ You can request Anycast static IPs from CloudFront to use with your distribution -CloudFront Anycast static IP lists contain 21 IPv4 IP addresses that are dedicated to your AWS account and spread across geographic regions. +You can request 21 Anycast static IP addresses to allowlist with network providers so that you can waive data charges for viewers who access your application. Alternatively, you can use these static IPs within outbound security firewalls to control traffic exchange with approved applications. + +If you want to enable routing of apex domains (such as example.com) directly to your CloudFront distributions, you can request 3 Anycast static IP addresses for this use case. Then, add A records in your DNS to point the apex domain to CloudFront. + +Anycast static IPs work with [Server Name Indication (SNI)](https://en.wikipedia.org/wiki/Server_Name_Indication). For more information, see [Use SNI to serve HTTPS requests (works for most clients)](./cnames-https-dedicated-ip-or-sni.html#cnames-https-sni). @@ -59 +63,3 @@ Before you begin, request an Anycast static IP list as explained in the precedin - 5. Review the service terms and pricing, and choose **Submit**. + 5. For **Static IP use cases** , select the appropriate use case. + + 6. Review the service terms and pricing, and choose **Submit**.