AWS AmazonCloudFront documentation change
Summary
Clarified DNS TXT record configuration for domain verification with placeholder values and endpoint lookup instructions
Security assessment
Improves documentation for SSL/TLS certificate validation process (a security feature) but does not address a specific vulnerability.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md b/AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md index ad040ec77..19fb17a57 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md +++ b//AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md @@ -77 +77 @@ Follow these procedures to verify that you own the domain for your distribution -If your domain is already pointed to CloudFront with an Amazon Route 53 alias record, you must add your DNS TXT record with `_cf-challenge.` in front of the domain name. This TXT record verifies that your domain name is linked to CloudFront. Repeat this step for each domain. The following shows an example TXT record: +If your domain is already pointed to CloudFront with an Amazon Route 53 alias record, you must add your DNS TXT record with `_cf-challenge.` in front of the domain name. This TXT record verifies that your domain name is linked to CloudFront. Repeat this step for each domain. The following shows how to update your TXT record: @@ -79 +79 @@ If your domain is already pointed to CloudFront with an Amazon Route 53 alias re - * Record name: `_cf-challenge.example.com` + * Record name: `_cf-challenge.`DomainName`` @@ -83 +83 @@ If your domain is already pointed to CloudFront with an Amazon Route 53 alias re - * Record value: `d111111abcdef8.cloudfront.net` + * Record value: ``CloudFrontRoutingEndpoint`` @@ -88 +88,3 @@ If your domain is already pointed to CloudFront with an Amazon Route 53 alias re -Your record will appear as: `_cf-challenge.example.com TXT d111111abcdef8.cloudfront.net` +For example, your TXT record might look like: `_cf-challenge.example.com TXT d111111abcdef8.cloudfront.net` + +You can find your CloudFront routing endpoint in the console on the distribution tenant detail page or use the [ListConnectionGroups](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConnectionGroups.html) API action in the _Amazon CloudFront API Reference_ to find it.