AWS cli documentation change
Summary
Updated AWS CLI version reference, added multiple notes about multi-tenant distribution limitations, corrected documentation links, increased maximum timeout values for origin response/keep-alive from 60 to 120 seconds, and added WAF V2/web ACL requirements for multi-tenant distributions
Security assessment
The change adds documentation about WAF V2 requirements for multi-tenant distributions (security feature), but there's no evidence of addressing a specific vulnerability. Timeout increases improve reliability but don't directly relate to security. Multi-tenant limitation notes are operational guidance rather than security fixes.
Diff
diff --git a/cli/latest/reference/cloudfront/update-distribution-with-staging-config.md b/cli/latest/reference/cloudfront/update-distribution-with-staging-config.md index 128b8b936..9ffed4a81 100644 --- a//cli/latest/reference/cloudfront/update-distribution-with-staging-config.md +++ b//cli/latest/reference/cloudfront/update-distribution-with-staging-config.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -337,0 +338,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -489 +493 @@ Distribution -> (structure) ->>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginSSLProtocols) in the _Amazon CloudFront Developer Guide_ . @@ -503 +507 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds. @@ -505 +509 @@ Distribution -> (structure) ->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -509 +513 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds. @@ -511 +515 @@ Distribution -> (structure) ->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -523 +527 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 30 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the _origin response timeout_ . The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 30 seconds. @@ -525 +529 @@ Distribution -> (structure) ->>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -529 +533 @@ Distribution -> (structure) ->>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don’t specify otherwise) is 5 seconds. +>>>>>>> Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don’t specify otherwise) is 5 seconds. @@ -531 +535 @@ Distribution -> (structure) ->>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . +>>>>>>> For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the _Amazon CloudFront Developer Guide_ . @@ -650,0 +655,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -749,0 +758,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -964,0 +977,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -972,0 +989,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -978,0 +999,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1032,0 +1057,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1131,0 +1160,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1346,0 +1379,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1354,0 +1391,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1360,0 +1401,4 @@ Distribution -> (structure) +>>>>>> ### Note +>>>>>> +>>>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>>>> @@ -1457,0 +1502,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1485,0 +1534,4 @@ Distribution -> (structure) +>>>> ### Note +>>>> +>>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>>> @@ -1580,0 +1633,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> Multi-tenant distributions only support WAF V2 web ACLs. +>>> @@ -1594,0 +1651,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) . +>>> @@ -1611,0 +1672,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1615,0 +1680,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports standard distributions. You can’t specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1619,0 +1688,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html) . +>>> @@ -1623,0 +1696,4 @@ Distribution -> (structure) +>>> ### Note +>>> +>>> This field only supports multi-tenant distributions. You can’t specify this field for standard distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the _Amazon CloudFront Developer Guide_ . +>>> @@ -1660 +1736 @@ Distribution -> (structure) ->>> The connection mode to filter distributions by. +>>> This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants(tenant-only). @@ -1704 +1780 @@ ETag -> (string) - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) »