AWS apigateway documentation change
Summary
Updated documentation for edge-optimized custom domain configuration with routing mode changes, TLS version ordering adjustment, and expanded guidance on API mappings/routing rules
Security assessment
Changes focus on routing configuration (API_MAPPING_ONLY mode) and procedural ordering rather than addressing security vulnerabilities. While TLS version selection remains a security configuration, the change only reorders existing steps rather than introducing new security guidance. No evidence of patching vulnerabilities or addressing exploits.
Diff
diff --git a/apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md b/apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md index 57147374f..604567a44 100644 --- a//apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md +++ b//apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md @@ -5 +5 @@ -ConsiderationsCreate an edge-optimize custom domain nameConfigure base path mapping of an API with a custom domain name as its hostnameCreate a DNS record for your edge-optimized custom domain nameLog custom domain name creation in CloudTrailRotate a certificate imported into ACMCall your API with custom domain names +ConsiderationsCreate an edge-optimize custom domain nameConfigure base path mapping of an API with a custom domain name as its hostnameCreate a DNS record for your edge-optimized custom domain nameLog custom domain name creation in CloudTrailRotate a certificate imported into ACMCall your API with custom domain names when you use a base path mapping @@ -63 +63 @@ AWS Management Console - 5. For **API endpoint type** , choose **Edge-optimized**. + 5. For **Routing mode** , choose **API_MAPPING_ONLY**. @@ -65 +65 @@ AWS Management Console - 6. Choose a minimum TLS version. + 6. For **API endpoint type** , choose **Edge-optimized**. @@ -67 +67 @@ AWS Management Console - 7. Choose an ACM certificate. + 7. Choose a minimum TLS version. @@ -69 +69,3 @@ AWS Management Console - 8. Choose **Add domain name**. + 8. Choose an ACM certificate. + + 9. Choose **Add domain name**. @@ -88 +90 @@ For code examples of this REST API call, see [domainname:create](https://docs.aw -An edge-optimized custom domain names takes about 40 minutes to be ready, but the console immediately displays the associated CloudFront distribution domain name, in the form of ``distribution-id`.cloudfront.net`, along with the certificate ARN. In the meantime, you can create a base path mapping and then configure the DNS record alias to map the custom domain name to the associated CloudFront distribution domain name. +An edge-optimized custom domain names takes about 40 minutes to be ready, but the console immediately displays the associated CloudFront distribution domain name, in the form of ``distribution-id`.cloudfront.net`, along with the certificate ARN. In the meantime, you can create a base path mapping or a routing rule and then configure the DNS record alias to map the custom domain name to the associated CloudFront distribution domain name. @@ -92 +94 @@ An edge-optimized custom domain names takes about 40 minutes to be ready, but th -You can use base path mapping to use a single custom domain name as the hostname of multiple APIs. This makes an API accessible through the combination of the custom domain name and the associated base path. +Because you set the routing mode to `API_MAPPING_ONLY`, you can use base path mapping to use a single custom domain name as the hostname of multiple APIs. This makes an API accessible through the combination of the custom domain name and the associated base path. @@ -98 +100 @@ This associates the `PetStore` API with the base path of an empty string. If you -To configure API mappings on multiple levels, you can only use a Regional custom domain name. Edge-optimized custom domain names are not supported. For more information, see [Map API stages to a custom domain name for REST APIs](./rest-api-mappings.html). +To configure API mappings on multiple levels, you can only use a Regional custom domain name. Edge-optimized custom domain names are not supported. For more information, see [Use API mappings to connect API stages to a custom domain name for REST APIs](./rest-api-mappings.html). @@ -130,0 +133,2 @@ For code examples of the REST API call, see [basepathmapping:create](https://doc +For more flexibility on how you route traffic to your APIs, you can change the routing mode to `ROUTING_RULE_ONLY` or `ROUTING_RULE_THEN_API_MAPPING` and create a routing rule. For more information, see [Send traffic to your APIs through your custom domain name in API Gateway](./rest-api-routing-mode.html). + @@ -226 +230 @@ The following [update-domain-name](https://docs.aws.amazon.com/cli/latest/refere -## Call your API with custom domain names +## Call your API with custom domain names when you use a base path mapping @@ -238,0 +243,2 @@ qf3duz | tst | https://qf3duz.execute-api.us-east-1.amazonaws.com/tst | /booksta +For more flexibility on how you route traffic to your APIs, you can create a routing rule. For more information, see [Send traffic to your APIs through your custom domain name in API Gateway](./rest-api-routing-mode.html). +