AWS elasticbeanstalk documentation change
Summary
Added important note about potential unexpected behavior when using System.getenv for environment variables in Tomcat platforms
Security assessment
The change warns about compatibility issues but does not address a specific security vulnerability or introduce security features. The context relates to environment variable access behavior, not security controls.
Diff
diff --git a/elasticbeanstalk/latest/relnotes/release-2025-03-28-al2023.md b/elasticbeanstalk/latest/relnotes/release-2025-03-28-al2023.md index 22d8b78e4..a05f920a3 100644 --- a//elasticbeanstalk/latest/relnotes/release-2025-03-28-al2023.md +++ b//elasticbeanstalk/latest/relnotes/release-2025-03-28-al2023.md @@ -50 +50,5 @@ The following table lists the changes included in this release. -**Tomcat** | Starting with this release, you can also use `System.getenv` to access plaintext environment variables. You can continue to use `System.getProperty` to access plaintext environment variables. See [Using the Elastic Beanstalk Tomcat platform](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/java-tomcat-platform.html) for more information. **Tomcat 11 platform branches** +**Tomcat** | Starting with this release, you can also use `System.getenv` to access plaintext environment variables. You can continue to use `System.getProperty` to access plaintext environment variables. See [Using the Elastic Beanstalk Tomcat platform](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/java-tomcat-platform.html) for more information. + +###### Important + +The addition of`System.getenv` access for environment variables in Tomcat platform versions in this release may cause unexpected behavior in applications that give environment variables precedence over Java system properties or when explicitly switching from `System.getProperty` to `System.getenv`. For more information and recommended actions, see [Using the Elastic Beanstalk Tomcat platform](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/java-tomcat-platform.html). **Tomcat 11 platform branches**