AWS elasticloadbalancing documentation change
Summary
Updated certificate management documentation with corrected CLI/CloudFormation syntax, streamlined console steps, and clarified security policy/ALPN settings
Security assessment
Changes improve accuracy of security-related configurations (SSL policies, certificate management) but do not address a specific vulnerability. Enhanced documentation of secure listener settings qualifies as security documentation.
Diff
diff --git a/elasticloadbalancing/latest/network/listener-update-certificates.md b/elasticloadbalancing/latest/network/listener-update-certificates.md index de6a80535..cffa6f917 100644 --- a//elasticloadbalancing/latest/network/listener-update-certificates.md +++ b//elasticloadbalancing/latest/network/listener-update-certificates.md @@ -64 +64 @@ Use the [modify-listener](https://docs.aws.amazon.com/cli/latest/reference/elbv2 - --certificates CertificateArn=certificate-arn + --certificates CertificateArn=new-default-certificate-arn @@ -71 +71 @@ CloudFormation -Update the [AWS::ElasticLoadBalancingV2::](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/) resource with the new default certificate. +Update the [AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html) resource with the new default certificate. @@ -81,3 +80,0 @@ Update the [AWS::ElasticLoadBalancingV2::](https://docs.aws.amazon.com/AWSCloudF - SslPolicy: "ELBSecurityPolicy-TLS13-1-2-2021-06" - Certificates: - - CertificateArn: "new-default-certificate-arn" @@ -86,0 +84,3 @@ Update the [AWS::ElasticLoadBalancingV2::](https://docs.aws.amazon.com/AWSCloudF + SslPolicy: "ELBSecurityPolicy-TLS13-1-2-2021-06" + Certificates: + - CertificateArn: "new-default-certificate-arn" @@ -187,3 +187 @@ Console - 5. Select the check box for the listener and choose **Actions** , **Add SSL certificates for SNI**. - - 6. Select the check boxes for the certificates and choose **Remove**. + 5. On the **Certificates** tab, select the check boxes for the certificates and choose **Remove**. @@ -191 +189 @@ Console - 7. When prompted for confirmation, enter `confirm` and choose **Remove**. + 6. When prompted for confirmation, enter `confirm` and choose **Remove**. @@ -227 +225 @@ Console - 5. Choose **Edit**. + 5. Choose **Actions** , **Edit listener**. @@ -229 +227 @@ Console - 6. For **Security policy** , choose a security policy. + 6. In the **Secure listener settings** section, under **Security policy** , choose a new security policy. @@ -253 +251 @@ CloudFormation -Update the [AWS::ElasticLoadBalancingV2::](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/) resource with the new security policy. +Update the [AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html) resource with the new security policy. @@ -287 +285 @@ Console - 5. Choose **Edit**. + 5. Choose **Actions** , **Edit listener**. @@ -289 +287 @@ Console - 6. For **ALPN policy** , choose a policy to enable ALPN or choose **None** to disable ALPN. + 6. In the **Secure listener settings** section, for **ALPN policy** , choose a policy to enable ALPN or choose **None** to disable ALPN. @@ -313 +311 @@ CloudFormation -Update the [AWS::ElasticLoadBalancingV2::](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/) resource to include the ALPN policy. +Update the [AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html) resource to include the ALPN policy.