AWS AmazonCloudFront medium security documentation change
Summary
Clarified DNS TXT record requirements for domain transfers
Security assessment
Reinforces domain ownership verification through TXT records to prevent unauthorized transfers. While the security mechanism existed previously, the clarification strengthens documentation of this security control.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move-create-target.md b/AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move-create-target.md index 34bdf24bf..f7db99652 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move-create-target.md +++ b//AmazonCloudFront/latest/DeveloperGuide/alternate-domain-names-move-create-target.md @@ -62 +62 @@ If you already have a target distribution tenant, associate the certificate with -To move an alternate domain name from one AWS account to another, you must create a TXT record in your DNS configuration. This verification step helps prevent unauthorized domain transfers and CloudFront uses this TXT record to validate your ownership of the alternate domain name. +To move an alternate domain name from one AWS account to another, you must create a TXT record in your DNS configuration. This verification step helps prevent unauthorized domain transfers, and CloudFront uses this TXT record to validate your ownership of the alternate domain name. @@ -64 +64 @@ To move an alternate domain name from one AWS account to another, you must creat -In your DNS configuration, create a DNS TXT record that associates the alternate domain name with the target standard distribution. The TXT record format can vary, depending on the domain type. +In your DNS configuration, create a DNS TXT record that associates the alternate domain name with the target distribution tenant. The TXT record format can vary, depending on the domain type.