AWS AmazonCloudFront documentation change
Summary
Updated documentation for creating standard distributions with expanded step-by-step instructions, added AWS WAF security configuration step, TLS certificate management details, and domain setup guidance
Security assessment
Added explicit step (step 11) for enabling AWS WAF security protections and detailed TLS certificate configuration in step 13. While these are security-related features, there is no evidence these changes address a specific vulnerability. The updates provide documentation about existing security features rather than patching vulnerabilities.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating-console.md b/AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating-console.md index cdac52c1c..700a56f80 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating-console.md +++ b//AmazonCloudFront/latest/DeveloperGuide/distribution-web-creating-console.md @@ -59,0 +60,2 @@ Note the following: + * [Add a domain to your CloudFront standard distribution](./add-domain-existing-distribution.html) + @@ -65 +67 @@ Note the following: -You can create CloudFront multi-tenant distributions with settings that can be reused across multiple distribution tenants. With a multi-tenant distribution, you can have CloudFront configure your distribution settings for you, based on your content origin type. For more details about the preconfigured settings, see [CloudFront multi-tenant distribution reference](./template-preconfigured-origin-settings.html). You can also create distributions with settings that can be reused across multiple distribution tenants. For more information, see [Understand how multi-tenant distributions work](./distribution-config-options.html). Alternatively, you can use a standard distribution and manually configure your own distribution settings. +When you create a distribution, CloudFront configures your distribution settings for you, based on your content origin type. For more details about the preconfigured settings, see [Preconfigured distribution settings reference](./template-preconfigured-origin-settings.html). You can also create multi-tenant distributions with settings that can be reused across multiple distribution tenants. For more information, see [Understand how multi-tenant distributions work](./distribution-config-options.html). Alternatively, you can manually configure your own distribution settings. @@ -84 +86 @@ Multi-tenant - 7. On the **Specify origin** page, select the origin type that CloudFront will get your content from. CloudFront will use the recommended settings for that origin type for your multi-tenant distribution. For more information about the recommended settings, see [CloudFront multi-tenant distribution reference](./template-preconfigured-origin-settings.html). + 7. On the **Specify origin** page, select the origin type that CloudFront will get your content from. CloudFront will use the recommended settings for that origin type for your multi-tenant distribution. For more information about the recommended settings, see [Preconfigured distribution settings reference](./template-preconfigured-origin-settings.html). @@ -201 +203,15 @@ Standard - 3. Specify settings for the distribution. For more information, see [Distribution settings reference](./distribution-web-values-specify.html). + 3. Enter a **Distribution name** for the standard distribution. The name will appear as the value for the `Name` key as a tag. You can change this value later. You can add up to 50 tags for your standard distribution. For more information, see [Tag a distribution](./tagging.html). + + 4. Choose **Single website or app** , **Next**. + + 5. (Optional) For **Domain setup** , enter a domain that's already registered with Route 53 in your AWS account, or register a new domain. Complete the setup steps. + + * If your domain uses a DNS provider other than Route 53, you can still add the domain, but you'll need to do so after creating the distribution. Skip the domain setup for now to proceed with distribution creation. You must manually configure the domain and TLS certificate later. For more information, see [Add a domain to your CloudFront standard distribution](./add-domain-existing-distribution.html). + + 6. Choose **Next**. + + 7. On the **Specify origin** page, select the origin type that CloudFront will get your content from. CloudFront will use the recommended settings for that origin type for your distribution. For more information about the recommended settings, see [Preconfigured distribution settings reference](./template-preconfigured-origin-settings.html). + + 8. For **Origin** , choose or enter your origin. + + 9. For **Settings** , choose one of the following options: @@ -203 +219,5 @@ Standard - 4. Save your changes. + * **Use recommended origin settings** – Use the default recommended cache and origin settings for the origin type that you selected. + + * **Customize origin settings** – Customize the cache and origin settings. If you choose this option, specify your own values. + + 10. Choose **Next**. @@ -205 +225,9 @@ Standard - 5. After CloudFront creates your distribution, the value of the **Status** column for your distribution will change from **Deploying** to the date and time that the distribution is deployed. If you chose to enable the distribution, it will be ready to process requests at this time. + 11. On the **Enable security protections** page, choose whether to enable AWS WAF security protections. + + 12. Choose **Next**. + + 13. (Optional) If you are using Route 53 for your domain, you will see the **TLS certificate** page. If CloudFront can't find an existing AWS Certificate Manager (ACM) certificate for your domain in your AWS account in the `us-east-1` AWS Region, you can choose to automatically create a certificate or manually create it. After the certificate is created, choose **Next**. + + 14. Review your distribution details and choose **Create distribution**. + + 15. After CloudFront creates your distribution, the value of the **Status** column for your distribution will change from **Deploying** to the date and time that the distribution is deployed. @@ -211 +239,3 @@ The domain name that CloudFront assigns to your distribution appears in the list -You can use an alternate domain name, instead of the name assigned to you by CloudFront; by following the steps in [Use custom URLs by adding alternate domain names (CNAMEs)](./CNAMEs.html). +You can use an alternate domain name, instead of the name assigned to you by CloudFront, by following the steps in [Use custom URLs by adding alternate domain names (CNAMEs)](./CNAMEs.html). + + 16. When your distribution is deployed, confirm that you can access your content by using your new CloudFront URL (d111111abcdef8.cloudfront.net) or the CNAME. For more information, see [Test a distribution](./distribution-web-testing.html). @@ -213 +243 @@ You can use an alternate domain name, instead of the name assigned to you by Clo - 6. When your distribution is deployed, confirm that you can access your content by using your new CloudFront URL (d111111abcdef8.cloudfront.net) or the CNAME. For more information, see [Test a distribution](./distribution-web-testing.html). + 17. Make sure to update your DNS records to point to CloudFront when you're ready to send traffic to your distribution. For more information, see [Point domains to CloudFront (standard distribution)](./add-domain-existing-distribution.html#point-domains-standard). @@ -232 +262 @@ When you perform an action on a distribution using the CloudFront API, you use t -When you deploy a distribution, you see the **Deploying** status under the **Last modified** column. Wait for the distribution to finish deploying and make sure the **Status** column shows **Enabled**. For more information, see [Distribution state](./distribution-web-values-specify.html#DownloadDistValuesEnabled). +When you deploy a distribution, you see the **Deploying** status under the **Last modified** column. Wait for the distribution to finish deploying and make sure the **Status** column shows **Enabled**. For more information, see [Distribution state](./DownloadDistValuesGeneral.html#DownloadDistValuesEnabled). @@ -242 +272 @@ You use the distribution's domain name in the links to your objects. For example -If you specified one or more alternate domain names (CNAMEs), you can use your own domain names for links to your objects instead of using the CloudFront domain name. For more information about CNAMEs, see [Alternate domain names (CNAMEs)](./distribution-web-values-specify.html#DownloadDistValuesCNAME). +If you specified one or more alternate domain names (CNAMEs), you can use your own domain names for links to your objects instead of using the CloudFront domain name. For more information about CNAMEs, see [Alternate domain names (CNAMEs)](./DownloadDistValuesGeneral.html#DownloadDistValuesCNAME). @@ -252 +282 @@ For more information about creating a distribution, see the following links. - * To learn how to create a distribution that uses an Amazon Simple Storage Service (Amazon S3) bucket origin with origin access control (OAC), see [Get started with a basic CloudFront distribution](./GettingStarted.SimpleDistribution.html). + * To learn how to create a distribution that uses an Amazon Simple Storage Service (Amazon S3) bucket origin with origin access control (OAC), see [Get started with a CloudFront standard distribution](./GettingStarted.SimpleDistribution.html). @@ -271 +301 @@ Migrate to a multi-tenant distribution -Distribution settings +Add a domain to your CloudFront standard distribution