AWS apigateway documentation change
Summary
Updated domain creation steps to include routing mode selection and expanded best practices
Security assessment
Added guidance about routing modes and traffic routing best practices. While routing configuration can impact security posture, the changes focus on functionality rather than explicitly addressing vulnerabilities or security controls.
Diff
diff --git a/apigateway/latest/developerguide/apigateway-private-custom-domains-tutorial.md b/apigateway/latest/developerguide/apigateway-private-custom-domains-tutorial.md index 0cfa4053b..fc83b50e9 100644 --- a//apigateway/latest/developerguide/apigateway-private-custom-domains-tutorial.md +++ b//apigateway/latest/developerguide/apigateway-private-custom-domains-tutorial.md @@ -30 +30 @@ Your ACM certificate must cover this domain name, but the domain name doesn't ne - 5. Select **Private - new**. + 5. Select **Private**. @@ -32 +32 @@ Your ACM certificate must cover this domain name, but the domain name doesn't ne - 6. For **ACM certificate** , select a certificate. + 6. For **Routing mode** , choose **API mappings only**. @@ -34 +34,3 @@ Your ACM certificate must cover this domain name, but the domain name doesn't ne - 7. Choose **Add domain name**. + 7. For **ACM certificate** , select a certificate. + + 8. Choose **Add domain name**. @@ -141,0 +144 @@ The output will like the following. + "routingMode" : "API_MAPPING_ONLY", @@ -194,0 +198,2 @@ The output will look like the following. +For more flexibility on how you route traffic to your APIs, you can change the routing mode to `ROUTING_RULE_ONLY` or `ROUTING_RULE_THEN_API_MAPPING` and create a routing rule. For more information, see [Send traffic to your APIs through your custom domain name in API Gateway](./rest-api-routing-mode.html). + @@ -397 +402 @@ We recommend that you use the following best practices when you create your priv - * Use base path mapping to map multiple private APIs to the same private custom domain name. + * Use base path mapping or routing rules to send traffic from one private custom domain name to multiple private APIs.