AWS Security ChangesHomeSearch

AWS AmazonCloudFront medium security documentation change

Service: AmazonCloudFront · 2025-10-16 · Security-related medium

File: AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.md

Summary

Removed section about FIPS security policies and related compliance information

Security assessment

Removal of FIPS 140-3 compliance documentation could impact users relying on validated cryptographic modules for regulatory compliance. This constitutes a security-relevant change affecting compliance postures.

Diff

diff --git a/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.md b/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.md
index af2972f28..1f76475cb 100644
--- a//AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.md
+++ b//AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.md
@@ -5 +5 @@
-FIPs security policiesOpenSSL, s2n, and RFC cipher namesSupported signature schemes between viewers and CloudFront
+OpenSSL, s2n, and RFC cipher namesSupported signature schemes between viewers and CloudFront
@@ -59,8 +58,0 @@ RC4-MD5 | ♦ |  |  |  |  |  |  |  |
-## FIPs security policies
-
-The Federal Information Processing Standard (FIPS) is a US and Canadian government standard that specifies the security requirements for cryptographic modules that protect sensitive information. To learn more, see [Federal Information Processing Standard (FIPS) 140](https://aws.amazon.com/compliance/fips/) on the _AWS Cloud Security Compliance_ page.
-
-All FIPS policies leverage the AWS-LC FIPS validated cryptographic module. To learn more, see the [ AWS-LC Cryptographic Module](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4631) page on the _NIST Cryptographic Module Validation Program_ site.
-
-TLSv1.2_2025 is a FIPS 140-3-compliant version of the TLS1.2_2021 security policy.
-