AWS cli documentation change
Summary
Updated documentation for ListDomainConflicts API with expanded guidance about domain conflict resolution between standard distributions and distribution tenants. Added operational examples, certificate requirements, and links to developer guide.
Security assessment
The changes emphasize proper domain configuration and certificate management when moving domains between distributions, which helps prevent misconfigurations that could lead to domain takeover or SSL/TLS issues. However, there is no explicit mention of addressing a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/cloudfront/list-domain-conflicts.md b/cli/latest/reference/cloudfront/list-domain-conflicts.md index 16ab390d4..73595390a 100644 --- a//cli/latest/reference/cloudfront/list-domain-conflicts.md +++ b//cli/latest/reference/cloudfront/list-domain-conflicts.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -59,0 +60,4 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c +### Note + +We recommend that you use the `ListDomainConflicts` API operation to check for domain conflicts, as it supports both standard distributions and distribution tenants. [ListConflictingAliases](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListConflictingAliases.html) performs similar checks but only supports standard distributions. + @@ -62 +66,14 @@ Lists existing domain associations that conflict with the domain that you specif -You can use this API operation when transferring domains to identify potential domain conflicts. Domain conflicts must be resolved first before they can be moved. +You can use this API operation to identify potential domain conflicts when moving domains between standard distributions and/or distribution tenants. Domain conflicts must be resolved first before they can be moved. + +For example, if you provide `www.example.com` as input, the returned list can include `www.example.com` and the overlapping wildcard alternate domain name (`.example.com` ), if they exist. If you provide `.example.com` as input, the returned list can include `*.example.com` and any alternate domain names covered by that wildcard (for example, `www.example.com` , `test.example.com` , `dev.example.com` , and so on), if they exist. + +To list conflicting domains, specify the following: + + * The domain to search for + * The ID of a standard distribution or distribution tenant in your account that has an attached TLS certificate, which covers the specified domain + + + +For more information, including how to set up the standard distribution or distribution tenant, and the certificate, see [Moving an alternate domain name to a different standard distribution or distribution tenant](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/CNAMEs.html#alternate-domain-names-move) in the _Amazon CloudFront Developer Guide_ . + +You can optionally specify the maximum number of items to receive in the response. If the total number of items in the list exceeds the maximum that you specify, or the default maximum, the response is paginated. To get the next page of items, send a subsequent request that specifies the `NextMarker` value from the current response as the `Marker` value in the subsequent request. @@ -107 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cloudf -> The distribution resource identifier. This can be the distribution or distribution tenant that has a valid certificate, which covers the domain that you specify. +> The distribution resource identifier. This can be the standard distribution or distribution tenant that has a valid certificate, which covers the domain that you specify. @@ -322 +339 @@ NextMarker -> (string) - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) »