AWS awssupport documentation change
Summary
Added documentation about revised CloudFront checks with notes about classic distributions applicability
Security assessment
The change adds notes to the 'CloudFront Custom SSL Certificates in the IAM Certificate Store' security check, which relates to certificate management. While this clarifies documentation for a security-related check, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/awssupport/latest/user/aws-trusted-advisor-change-log.md b/awssupport/latest/user/aws-trusted-advisor-change-log.md index 451d7c7a6..db035e32c 100644 --- a//awssupport/latest/user/aws-trusted-advisor-change-log.md +++ b//awssupport/latest/user/aws-trusted-advisor-change-log.md @@ -5 +5 @@ -Revised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal +CloudFront specific checks revisedRevised checksDeprecated AWS Security Hub checksNew check: Amazon RDS Continuous Backup Not EnabledNew check: AWS CloudTrail Management Events LoggingUpdated the Auto Scaling Group Resources checkUpdated the IAM Access Analyzer External Access checkAdded 1 new checkUpdated 3 checksAdded 4 checksUpdated 3 checksAdded 9 new checksUpdated 1 Security check and added 1 Security checkUpdated 6 Security checksUpdated 1 fault tolerance checksUpdated 9 checksRemoved 5 checks and added 1 checkRemoved fault tolerance checksNew fault tolerance checkUpdated fault tolerance and security checksNew fault tolerance checkUpdated fault tolerance checkUpdated security checkNew security and performance checksNew security checkNew fault tolerance and cost optimization checksNew fault tolerance checksNew checks for Amazon RDSNew AWS Trusted Advisor APITrusted Advisor check removalIntegration of AWS Config checks into Trusted AdvisorNew fault tolerance checksNew service limits checkNew fault tolerance checkNew fault tolerance and performance checksNew fault tolerance checksNew fault tolerance checksRegion Expansion of Amazon ECS Fault Tolerance ChecksNew fault tolerance checksNew fault tolerance checksUpdates to the Trusted Advisor integration with AWS Security HubNew fault tolerance checks for AWS Resilience HubUpdate to the Trusted Advisor consoleNew checks for Amazon EC2Added Security Hub checks to Trusted AdvisorAdded checks from AWS Compute OptimizerUpdates to the Exposed Access Keys checkUpdated checks for AWS Direct ConnectAWS Security Hub controls added to the AWS Trusted Advisor consoleNew checks for Amazon EC2 and AWS Well-ArchitectedUpdated check name for Amazon OpenSearch ServiceAdded checks for Amazon Elastic Block Store volume storageAdded checks for AWS LambdaTrusted Advisor check removalUpdated checks for Amazon Elastic Block StoreTrusted Advisor check removalTrusted Advisor check removal @@ -16,0 +17,10 @@ For more information about the available checks, see the [AWS Trusted Advisor ch +## CloudFront specific checks revised + +The following checks have been revised: + +Check name | Check ID | Description +---|---|--- +[CloudFront Alternate Domain Names](https://docs.aws.amazon.com/awssupport/latest/user/performance-checks.html#cloudfront-domain-name-check) | `N420c450f2` | Added a note indicating that this check applies to classic Amazon CloudFront distributions. +[CloudFront Custom SSL Certificates in the IAM Certificate Store](https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#cloudfront-custom-ssl-certificates-iam-certificate-store) | `N425c450f2` | Added a note indicating that this check applies to classic Amazon CloudFront distributions. +[CloudFront Header Forwarding and Cache Hit Ratio](https://docs.aws.amazon.com/awssupport/latest/user/performance-checks.html#cloudfront-forwarded-headers) | `N415c450f2` | Added a note indicating that this check applies to classic Amazon CloudFront distributions. +