AWS cli low security documentation change
Summary
Added multiple notes about multi-tenant distribution limitations and WAF version requirements
Security assessment
Added explicit note that 'Multi-tenant distributions only support WAF V2 web ACLs' - WAF is a security feature and specifying version requirements helps enforce security best practices. Other notes clarify security-related constraints for SaaS configurations.
Diff
diff --git a/cli/latest/reference/cloudfront/get-distribution.md b/cli/latest/reference/cloudfront/get-distribution.md index 545a984ec..e0b360c29 100644 --- a//cli/latest/reference/cloudfront/get-distribution.md +++ b//cli/latest/reference/cloudfront/get-distribution.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -452,0 +453,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -604 +608 @@ Distribution -> (structure) ->>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ . @@ -618 +622 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds. @@ -620 +624 @@ Distribution -> (structure) ->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -624 +628 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds. @@ -626 +630 @@ Distribution -> (structure) ->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -638 +642 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds. @@ -640 +644 @@ Distribution -> (structure) ->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -644 +648 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds. @@ -646 +650 @@ Distribution -> (structure) ->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -765,0 +770,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -864,0 +873,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1079,0 +1092,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1087,0 +1104,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1093,0 +1114,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1147,0 +1172,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1246,0 +1275,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1461,0 +1494,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1469,0 +1506,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1475,0 +1516,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1572,0 +1617,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1600,0 +1649,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1695,0 +1748,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> Multi-tenant distributions only support WAF V2 web ACLs. +>>> @@ -1709,0 +1766,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) . +>>> @@ -1726,0 +1787,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1730,0 +1795,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1734,0 +1803,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) . +>>> @@ -1738,0 +1811,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports multi-tenant distributions. You can’t specify this field for standard distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1775 +1851 @@ Distribution -> (structure) ->>> The connection mode to filter distributions by. +>>> This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants(tenant-only). @@ -1819 +1895 @@ ETag -> (string) - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) »