AWS Security ChangesHomeSearch

AWS AmazonCloudFront medium security documentation change

Service: AmazonCloudFront · 2025-08-25 · Security-related medium

File: AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md

Summary

Added note about reserved security group name for VPC origins

Security assessment

The note prevents misconfiguration by warning against using a reserved security group name, which could lead to unintended access or conflicts. This is a security best practice.

Diff

diff --git a/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md b/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md
index 98e93092d..d94289df5 100644
--- a//AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md
+++ b//AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.md
@@ -57,0 +58,4 @@ IPv6-only subnets are not supported.
+###### Note
+
+CloudFront-VPCOrigins-Service-SG is an AWS reserved name for security groups that are used for VPC origins. You must specify a different name for your security group. For more information, see [Creating a security group](https://docs.aws.amazon.com/vpc/latest/userguide/creating-security-groups.html).
+