AWS cli documentation change
Summary
Updated documentation for ListConflictingAliases to clarify support for standard distributions, add a note recommending ListDomainConflicts API for broader coverage, refine alias conflict examples, and replace 'SSL/TLS certificate' with 'TLS certificate' terminology.
Security assessment
The changes emphasize TLS certificate usage (security best practice) and clarify partial hiding of account/distribution IDs to protect third-party information. However, there is no explicit evidence of addressing a specific security vulnerability. The recommendation to use ListDomainConflicts API improves documentation but doesn't directly describe a security feature.
Diff
diff --git a/cli/latest/reference/cloudfront/list-conflicting-aliases.md b/cli/latest/reference/cloudfront/list-conflicting-aliases.md index 12769ac16..bbd5e0486 100644 --- a//cli/latest/reference/cloudfront/list-conflicting-aliases.md +++ b//cli/latest/reference/cloudfront/list-conflicting-aliases.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Gets a list of aliases (also called CNAMEs or alternate domain names) that conflict or overlap with the provided alias, and the associated CloudFront distributions and Amazon Web Services accounts for each conflicting alias. In the returned list, the distribution and account IDs are partially hidden, which allows you to identify the distributions and accounts that you own, but helps to protect the information of ones that you don’t own. +### Note @@ -61 +61 @@ Gets a list of aliases (also called CNAMEs or alternate domain names) that confl -Use this operation to find aliases that are in use in CloudFront that conflict or overlap with the provided alias. For example, if you provide `www.example.com` as input, the returned list can include `www.example.com` and the overlapping wildcard alternate domain name (`*.example.com` ), if they exist. If you provide `*.example.com` as input, the returned list can include `*.example.com` and any alternate domain names covered by that wildcard (for example, `www.example.com` , `test.example.com` , `dev.example.com` , and so on), if they exist. +The `ListConflictingAliases` API operation only supports standard distributions. To list domain conflicts for both standard distributions and distribution tenants, we recommend that you use the [ListDomainConflicts](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDomainConflicts.html) API operation instead. @@ -63 +63,7 @@ Use this operation to find aliases that are in use in CloudFront that conflict o -To list conflicting aliases, you provide the alias to search and the ID of a distribution in your account that has an attached SSL/TLS certificate that includes the provided alias. For more information, including how to set up the distribution and certificate, see [Moving an alternate domain name to a different distribution](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/CNAMEs.html#alternate-domain-names-move) in the _Amazon CloudFront Developer Guide_ . +Gets a list of aliases that conflict or overlap with the provided alias, and the associated CloudFront standard distribution and Amazon Web Services accounts for each conflicting alias. An alias is commonly known as a custom domain or vanity domain. It can also be called a CNAME or alternate domain name. + +In the returned list, the standard distribution and account IDs are partially hidden, which allows you to identify the standard distribution and accounts that you own, and helps to protect the information of ones that you don’t own. + +Use this operation to find aliases that are in use in CloudFront that conflict or overlap with the provided alias. For example, if you provide `www.example.com` as input, the returned list can include `www.example.com` and the overlapping wildcard alternate domain name (`.example.com` ), if they exist. If you provide `.example.com` as input, the returned list can include `*.example.com` and any alternate domain names covered by that wildcard (for example, `www.example.com` , `test.example.com` , `dev.example.com` , and so on), if they exist. + +To list conflicting aliases, specify the alias to search and the ID of a standard distribution in your account that has an attached TLS certificate that includes the provided alias. For more information, including how to set up the standard distribution and certificate, see [Moving an alternate domain name to a different standard distribution or distribution tenant](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/CNAMEs.html#alternate-domain-names-move) in the _Amazon CloudFront Developer Guide_ . @@ -103 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf -> The ID of a distribution in your account that has an attached SSL/TLS certificate that includes the provided alias. +> The ID of a standard distribution in your account that has an attached TLS certificate that includes the provided alias. @@ -238 +244 @@ ConflictingAliasesList -> (structure) ->>> An alias (also called a CNAME) and the CloudFront distribution and Amazon Web Services account ID that it’s associated with. The distribution and account IDs are partially hidden, which allows you to identify the distributions and accounts that you own, but helps to protect the information of ones that you don’t own. +>>> An alias (also called a CNAME) and the CloudFront standard distribution and Amazon Web Services account ID that it’s associated with. The standard distribution and account IDs are partially hidden, which allows you to identify the standard distributions and accounts that you own, and helps to protect the information of ones that you don’t own. @@ -246 +252 @@ ConflictingAliasesList -> (structure) ->>>> The (partially hidden) ID of the CloudFront distribution associated with the alias. +>>>> The (partially hidden) ID of the CloudFront standard distribution associated with the alias. @@ -250 +256 @@ ConflictingAliasesList -> (structure) ->>>> The (partially hidden) ID of the Amazon Web Services account that owns the distribution that’s associated with the alias. +>>>> The (partially hidden) ID of the Amazon Web Services account that owns the standard distribution that’s associated with the alias. @@ -262 +268 @@ ConflictingAliasesList -> (structure) - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) »