AWS sms-voice medium security documentation change
Summary
Added guidance to create separate protect configurations per use case for improved detection accuracy and introduced 'Monitor' and 'Filter' country rules. Clarified behavior when no default configuration is set.
Security assessment
The addition of 'Monitor' and 'Filter' country rules introduces new security controls for threat detection and message filtering. Separating configurations by use case (e.g., marketing vs. login/sign-up) improves risk evaluation granularity and ensures continued message delivery for unaffected use cases during security incidents (referenced as 'AIT'). These changes directly enhance security posture by enabling more precise threat management.
Diff
diff --git a/sms-voice/latest/userguide/protect-configuration.md b/sms-voice/latest/userguide/protect-configuration.md index f3be540b9..594016dd1 100644 --- a//sms-voice/latest/userguide/protect-configuration.md +++ b//sms-voice/latest/userguide/protect-configuration.md @@ -7 +7 @@ -Use protect configurations to control which destination countries AWS End User Messaging SMS can send your messages to. By controlling which countries you allow messages to be sent to, you can avoid sending to countries with high message prices or countries you don't operate in. Each protect configuration contains individual allow and block country rules for SMS, MMS, and voice. +Use protect configurations to control which destination countries AWS End User Messaging SMS can send your messages to. By controlling which countries you allow messages to be sent to, you can avoid sending to countries with high message prices or countries you don't operate in. Each protect configuration contains individual allow and block country rules for SMS, MMS, and voice. Create separate protect configurations for each messaging use case to improve detection accuracy. Separating use cases like marketing notifications from login/sign-up enables more precise risk evaluation. Additionally, when one use case faces AIT, other use cases continue to deliver messages without any message filtering. @@ -23 +23 @@ To use a protect configuration with other AWS services to send messages, like Am - 4. _None_ – If no _account default_ is configured, then no protection configuration will be applied. + 4. _None_ – The protect configuration will only be used if specified in a `SendTextMessage` API request. @@ -41 +41 @@ Depending on your use case we recommend the following: - 2. Edit the Allow and Blocked country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html). + 2. Edit the _Allow_ , _Block_ , _Monitor_ , and _Filter_ country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html). @@ -51 +51 @@ Depending on your use case we recommend the following: - 3. Edit the Allow and Blocked country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html). + 3. Edit the _Allow_ , _Block_ , _Monitor_ , and _Filter_ country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html). @@ -59 +59 @@ Depending on your use case we recommend the following: - 2. Edit the Allow and Blocked country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html). + 2. Edit the _Allow_ , _Block_ , _Monitor_ , and _Filter_ country rules for SMS, MMS, and voice by following the directions in [Change a protect configuration country rules in AWS End User Messaging SMS](./protect-configuration-edit-countries.html).