AWS AmazonCloudFront medium security documentation change
Summary
Added documentation for CloudFront multi-tenant distributions, including security requirements (AWS WAF V2 ACLs) and format limitations
Security assessment
Explicitly states that multi-tenant distributions only support AWS WAF V2 web ACLs, which indicates an enforcement of modern security controls. WAF V2 provides improved security features over previous versions, making this a security-related configuration requirement.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/distribution-working-with.md b/AmazonCloudFront/latest/DeveloperGuide/distribution-working-with.md index a9e7853db..075885f87 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/distribution-working-with.md +++ b//AmazonCloudFront/latest/DeveloperGuide/distribution-working-with.md @@ -9 +9,3 @@ You create an Amazon CloudFront distribution to tell CloudFront from where you w -Choose from the following configuration settings: +You can create CloudFront multi-tenant distributions with settings that can be reused across multiple distribution tenants. With a multi-tenant distribution, you can have CloudFront configure your distribution settings for you, based on your content origin type. For more details about the preconfigured settings, see [CloudFront multi-tenant distribution reference](./template-preconfigured-origin-settings.html). You can also create distributions with settings that can be reused across multiple distribution tenants. For more information, see [Understand how multi-tenant distributions work](./distribution-config-options.html). Alternatively, you can use a standard distribution and manually configure your own distribution settings. + +The following settings can be configured: @@ -15 +17 @@ Choose from the following configuration settings: - * **Security** —Whether you want to enable AWS WAF protection and require users to use HTTPS to access your content. + * **Security** —Whether you want to enable AWS WAF protection and require users to use HTTPS to access your content. For multi-tenant distributions, only AWS WAF V2 web access control lists (ACLs) are supported. @@ -36 +38 @@ You can use distributions to serve the following content over HTTP or HTTPS: - * Video on demand in different formats, such as Apple HTTP Live Streaming (HLS) and Microsoft Smooth Streaming. For more information, see [Deliver video on demand with CloudFront](./on-demand-video.html). + * Video on demand in different formats, such as Apple HTTP Live Streaming (HLS) and Microsoft Smooth Streaming. (For multi-tenant distributions, Smooth Streaming is not supported.) For more information, see [Deliver video on demand with CloudFront](./on-demand-video.html). @@ -46,0 +49,2 @@ The following topics provide more details about CloudFront distributions and how + * [Understand how multi-tenant distributions work](./distribution-config-options.html) + @@ -82 +86 @@ Get started with a secure static website -Create a distribution +Understand how multi-tenant distributions work