AWS Security ChangesHomeSearch

AWS AmazonCloudFront documentation change

Service: AmazonCloudFront · 2025-08-10 · Documentation low

File: AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md

Summary

Corrected DNS record name from '_cf_challenge' to '_cf-challenge'

Security assessment

Fixes a documentation typo in DNS validation steps. While DNS validation is security-related, this change does not address a specific vulnerability or add security documentation.

Diff

diff --git a/AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md b/AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md
index a5a2e6933..745ed6a3e 100644
--- a//AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md
+++ b//AmazonCloudFront/latest/DeveloperGuide/managed-cloudfront-certificates.md
@@ -100 +100 @@ If you're a SaaS provider and you want to allow certificate issuance without req
-  2. In your DNS, add the `_cf_challenge.customer-123.example-saas-provider.com TXT d111111abcdef8.cloudfront.net` TXT record to your DNS configuration.
+  2. In your DNS, add the `_cf-challenge.customer-123.example-saas-provider.com TXT d111111abcdef8.cloudfront.net` TXT record to your DNS configuration.