AWS Security ChangesHomeSearch

AWS apigateway documentation change

Service: apigateway · 2025-06-04 · Documentation low

File: apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md

Summary

Updated documentation for edge-optimized custom domain configuration with routing mode changes, TLS version ordering adjustment, and expanded guidance on API mappings/routing rules

Security assessment

Changes focus on routing configuration (API_MAPPING_ONLY mode) and procedural ordering rather than addressing security vulnerabilities. While TLS version selection remains a security configuration, the change only reorders existing steps rather than introducing new security guidance. No evidence of patching vulnerabilities or addressing exploits.

Diff

diff --git a/apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md b/apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md
index 57147374f..604567a44 100644
--- a//apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md
+++ b//apigateway/latest/developerguide/how-to-edge-optimized-custom-domain-name.md
@@ -5 +5 @@
-ConsiderationsCreate an edge-optimize custom domain nameConfigure base path mapping of an API with a custom domain name as its hostnameCreate a DNS record for your edge-optimized custom domain nameLog custom domain name creation in CloudTrailRotate a certificate imported into ACMCall your API with custom domain names
+ConsiderationsCreate an edge-optimize custom domain nameConfigure base path mapping of an API with a custom domain name as its hostnameCreate a DNS record for your edge-optimized custom domain nameLog custom domain name creation in CloudTrailRotate a certificate imported into ACMCall your API with custom domain names when you use a base path mapping
@@ -63 +63 @@ AWS Management Console
-  5. For **API endpoint type** , choose **Edge-optimized**.
+  5. For **Routing mode** , choose **API_MAPPING_ONLY**.
@@ -65 +65 @@ AWS Management Console
-  6. Choose a minimum TLS version.
+  6. For **API endpoint type** , choose **Edge-optimized**.
@@ -67 +67 @@ AWS Management Console
-  7. Choose an ACM certificate.
+  7. Choose a minimum TLS version.
@@ -69 +69,3 @@ AWS Management Console
-  8. Choose **Add domain name**.
+  8. Choose an ACM certificate.
+
+  9. Choose **Add domain name**.
@@ -88 +90 @@ For code examples of this REST API call, see [domainname:create](https://docs.aw
-An edge-optimized custom domain names takes about 40 minutes to be ready, but the console immediately displays the associated CloudFront distribution domain name, in the form of ``distribution-id`.cloudfront.net`, along with the certificate ARN. In the meantime, you can create a base path mapping and then configure the DNS record alias to map the custom domain name to the associated CloudFront distribution domain name.
+An edge-optimized custom domain names takes about 40 minutes to be ready, but the console immediately displays the associated CloudFront distribution domain name, in the form of ``distribution-id`.cloudfront.net`, along with the certificate ARN. In the meantime, you can create a base path mapping or a routing rule and then configure the DNS record alias to map the custom domain name to the associated CloudFront distribution domain name.
@@ -92 +94 @@ An edge-optimized custom domain names takes about 40 minutes to be ready, but th
-You can use base path mapping to use a single custom domain name as the hostname of multiple APIs. This makes an API accessible through the combination of the custom domain name and the associated base path. 
+Because you set the routing mode to `API_MAPPING_ONLY`, you can use base path mapping to use a single custom domain name as the hostname of multiple APIs. This makes an API accessible through the combination of the custom domain name and the associated base path.
@@ -98 +100 @@ This associates the `PetStore` API with the base path of an empty string. If you
-To configure API mappings on multiple levels, you can only use a Regional custom domain name. Edge-optimized custom domain names are not supported. For more information, see [Map API stages to a custom domain name for REST APIs](./rest-api-mappings.html).
+To configure API mappings on multiple levels, you can only use a Regional custom domain name. Edge-optimized custom domain names are not supported. For more information, see [Use API mappings to connect API stages to a custom domain name for REST APIs](./rest-api-mappings.html).
@@ -130,0 +133,2 @@ For code examples of the REST API call, see [basepathmapping:create](https://doc
+For more flexibility on how you route traffic to your APIs, you can change the routing mode to `ROUTING_RULE_ONLY` or `ROUTING_RULE_THEN_API_MAPPING` and create a routing rule. For more information, see [Send traffic to your APIs through your custom domain name in API Gateway](./rest-api-routing-mode.html).
+
@@ -226 +230 @@ The following [update-domain-name](https://docs.aws.amazon.com/cli/latest/refere
-## Call your API with custom domain names
+## Call your API with custom domain names when you use a base path mapping
@@ -238,0 +243,2 @@ qf3duz | tst | https://qf3duz.execute-api.us-east-1.amazonaws.com/tst | /booksta
+For more flexibility on how you route traffic to your APIs, you can create a routing rule. For more information, see [Send traffic to your APIs through your custom domain name in API Gateway](./rest-api-routing-mode.html).
+