AWS apigateway documentation change
Summary
Restructured sections for API types, updated header translation behavior, and clarified Signature Version 4A support scope
Security assessment
Clarifies that Signature Version 4A isn't officially supported for HTTP/WebSocket APIs, which relates to authentication security protocols. However, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/apigateway/latest/developerguide/api-gateway-known-issues.md b/apigateway/latest/developerguide/api-gateway-known-issues.md index 838088944..aa4a3527e 100644 --- a//apigateway/latest/developerguide/api-gateway-known-issues.md +++ b//apigateway/latest/developerguide/api-gateway-known-issues.md @@ -5 +5 @@ -Important notes for REST APIs, HTTP APIs, and WebSocket APIsAmazon API Gateway important notes for HTTP APIsImportant notes for REST APIs and WebSocket APIsImportant notes for WebSocket APIsImportant notes for REST APIs +Amazon API Gateway important notes for HTTP APIsAmazon API Gateway important notes for HTTP and WebSocket APIsImportant notes for REST APIs and WebSocket APIsImportant notes for WebSocket APIsImportant notes for REST APIs @@ -13,2 +12,0 @@ The following section details notes that might impact your use of API Gateway. - * Amazon API Gateway important notes for REST APIs, HTTP APIs, and WebSocket APIs - @@ -16,0 +15,2 @@ The following section details notes that might impact your use of API Gateway. + * Amazon API Gateway important notes for HTTP and WebSocket APIs + @@ -26 +26 @@ The following section details notes that might impact your use of API Gateway. -## Amazon API Gateway important notes for REST APIs, HTTP APIs, and WebSocket APIs +## Amazon API Gateway important notes for HTTP APIs @@ -28 +28 @@ The following section details notes that might impact your use of API Gateway. - * Signature Version 4A is not officially supported by Amazon API Gateway. + * HTTP APIs translate incoming `X-Forwarded-*` headers into a standard `Forwarded` header and will append the egress IP, Host, and protocol. @@ -29,0 +30 @@ The following section details notes that might impact your use of API Gateway. + * API Gateway adds the Content-type header to your request if there is no payload and the Content-Length is 0. @@ -33 +33,0 @@ The following section details notes that might impact your use of API Gateway. -## Amazon API Gateway important notes for HTTP APIs @@ -35 +35 @@ The following section details notes that might impact your use of API Gateway. - * HTTP APIs translate incoming `X-Forwarded-*` headers into a standard `Forwarded` header and will append the egress IP, Host, and protocol. +## Amazon API Gateway important notes for HTTP and WebSocket APIs @@ -37 +37 @@ The following section details notes that might impact your use of API Gateway. - * API Gateway adds the Content-type header to your request if there is no payload and the Content-Length is 0. + * Signature Version 4A is not officially supported by Amazon API Gateway for HTTP and WebSocket APIs.