AWS AmazonCloudFront medium security documentation change
Summary
Added note about reserved security group name for VPC origins
Security assessment
The note prevents misconfiguration by warning against using a reserved security group name, which could lead to unintended access or conflicts. This is a security best practice.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md b/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md index 98e93092d..d94289df5 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md +++ b//AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md @@ -57,0 +58,4 @@ IPv6-only subnets are not supported. +###### Note + +CloudFront-VPCOrigins-Service-SG is an AWS reserved name for security groups that are used for VPC origins. You must specify a different name for your security group. For more information, see [Creating a security group](https://docs.aws.amazon.com/vpc/latest/userguide/creating-security-groups.html). +