AWS AmazonCloudFront documentation change
Summary
Added Firewall Manager policy support note, domain name specification details, removed cache behavior restrictions, and added connection group documentation link
Security assessment
The addition of Firewall Manager policy limitations informs users about current security feature gaps (multi-tenant distribution support), which is security-relevant documentation. However, this does not address an active security vulnerability.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.md b/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.md index 600ef91b6..9eaa9dc90 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.md +++ b//AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.md @@ -147 +147,7 @@ The following features can't be used with a multi-tenant distribution. If you wa -###### Note +###### Notes + + * Currently, AWS Firewall Manager policies only apply to your standard distributions. Firewall Manager will add support for multi-tenant distributions in a future release. + + * Unlike standard distributions, you specify your domain name (alias) at the _distribution tenant_ level. For more information, see [Request certificates for your CloudFront distribution tenant](./managed-cloudfront-certificates.html) and the [CreateDistributionTenant](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateDistributionTenant.html) API operation. + + @@ -149 +154,0 @@ The following features can't be used with a multi-tenant distribution. If you wa -Currently, AWS Firewall Manager policies only apply to your standard distributions. Firewall Manager will add support for multi-tenant distributions in a future release. @@ -161,7 +165,0 @@ Currently, AWS Firewall Manager policies only apply to your standard distributio - - - -The following cache behaviors don't support multi-tenant distributions or distribution tenants. - -###### Cache behaviors - @@ -185,2 +179,0 @@ The following cache behaviors don't support multi-tenant distributions or distri - * [Aliases](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_Aliases.html) - @@ -194 +187 @@ The following cache behaviors don't support multi-tenant distributions or distri -The following settings can't be configured in a multi-tenant distribution or distribution tenant. Instead, set the values that you want in a connection group. All distribution tenants associated in the connection group will use these settings. +The following settings can't be configured in a multi-tenant distribution or distribution tenant. Instead, set the values that you want in a connection group. All distribution tenants associated in the connection group will use these settings. For more information, see [Create custom connection group (optional)](./custom-connection-group.html).