AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-18 · Documentation low

File: cli/latest/reference/cloudfront/copy-distribution.md

Summary

Updated AWS CLI version references, added multiple notes about multi-tenant distribution limitations and WAF V2 requirements, increased maximum timeout values for origin response and keep-alive from 60 to 120 seconds, corrected documentation links, and clarified connection mode usage.

Security assessment

The documentation adds a note specifying that multi-tenant distributions require WAF V2 web ACLs, which enforces use of a modern security control. However, there is no explicit evidence of a patched vulnerability. Timeout increases are operational adjustments, and other notes clarify feature limitations without directly addressing security flaws.

Diff

diff --git a/cli/latest/reference/cloudfront/copy-distribution.md b/cli/latest/reference/cloudfront/copy-distribution.md
index 4ebb404c3..6bea8450c 100644
--- a//cli/latest/reference/cloudfront/copy-distribution.md
+++ b//cli/latest/reference/cloudfront/copy-distribution.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.54 Command Reference](../../index.html) »
@@ -348,0 +349,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>> 
@@ -500 +504 @@ Distribution -> (structure)
->>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ .
+>>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ .
@@ -514 +518 @@ Distribution -> (structure)
->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds.
+>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds.
@@ -516 +520 @@ Distribution -> (structure)
->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ .
+>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ .
@@ -520 +524 @@ Distribution -> (structure)
->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds.
+>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds.
@@ -522 +526 @@ Distribution -> (structure)
->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ .
+>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ .
@@ -534 +538 @@ Distribution -> (structure)
->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds.
+>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds.
@@ -536 +540 @@ Distribution -> (structure)
->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ .
+>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ .
@@ -540 +544 @@ Distribution -> (structure)
->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds.
+>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds.
@@ -542 +546 @@ Distribution -> (structure)
->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ .
+>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ .
@@ -661,0 +666,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -760,0 +769,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -975,0 +988,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -983,0 +1000,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -989,0 +1010,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -1043,0 +1068,4 @@ Distribution -> (structure)
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>>>> 
@@ -1142,0 +1171,4 @@ Distribution -> (structure)
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>>>> 
@@ -1357,0 +1390,4 @@ Distribution -> (structure)
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>>>> 
@@ -1365,0 +1402,4 @@ Distribution -> (structure)
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>>>> 
@@ -1371,0 +1412,4 @@ Distribution -> (structure)
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>>>> 
@@ -1468,0 +1513,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>> 
@@ -1496,0 +1545,4 @@ Distribution -> (structure)
+>>>> ### Note
+>>>> 
+>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>>> 
@@ -1591,0 +1644,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> Multi-tenant distributions only support WAF V2 web ACLs.
+>>> 
@@ -1605,0 +1662,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) .
+>>> 
@@ -1622,0 +1683,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>> 
@@ -1626,0 +1691,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>> 
@@ -1630,0 +1699,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) .
+>>> 
@@ -1634,0 +1707,4 @@ Distribution -> (structure)
+>>> ### Note
+>>> 
+>>> This field only supports multi-tenant distributions. You can’t specify this field for standard distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ .
+>>> 
@@ -1671 +1747 @@ Distribution -> (structure)
->>> The connection mode to filter distributions by.
+>>> This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants(tenant-only).
@@ -1719 +1795 @@ ETag -> (string)
-  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.54 Command Reference](../../index.html) »