AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-16 · Documentation medium

File: cli/latest/reference/elbv2/modify-load-balancer-attributes.md

Summary

Updated AWS CLI version reference and expanded documentation for routing.http2.enabled attribute with security implications of HTTP/2 header validation

Security assessment

The change adds security-relevant documentation about HTTP/2's stricter header validation rules and their enforcement when enabled. While not fixing a specific vulnerability, it improves security guidance by explaining how HTTP/2 validation prevents malformed headers (a common attack vector).

Diff

diff --git a/cli/latest/reference/elbv2/modify-load-balancer-attributes.md b/cli/latest/reference/elbv2/modify-load-balancer-attributes.md
index 1be9d645b..2304f7d6f 100644
--- a//cli/latest/reference/elbv2/modify-load-balancer-attributes.md
+++ b//cli/latest/reference/elbv2/modify-load-balancer-attributes.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -151 +151 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/elasti
->>>   * `routing.http2.enabled` \- Indicates whether HTTP/2 is enabled. The possible values are `true` and `false` . The default is `true` . Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens.
+>>>   * `routing.http2.enabled` \- Indicates whether clients can connect to the load balancer using HTTP/2. If `true` , clients can connect using HTTP/2 or HTTP/1.1. However, all client requests are subject to the stricter HTTP/2 header validation rules. For example, message header names must contain only alphanumeric characters and hyphens. If `false` , clients must connect using HTTP/1.1. The default is `true` .
@@ -473 +473 @@ Attributes -> (list)
->>>   * `routing.http2.enabled` \- Indicates whether HTTP/2 is enabled. The possible values are `true` and `false` . The default is `true` . Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens.
+>>>   * `routing.http2.enabled` \- Indicates whether clients can connect to the load balancer using HTTP/2. If `true` , clients can connect using HTTP/2 or HTTP/1.1. However, all client requests are subject to the stricter HTTP/2 header validation rules. For example, message header names must contain only alphanumeric characters and hyphens. If `false` , clients must connect using HTTP/1.1. The default is `true` .
@@ -512 +512 @@ Attributes -> (list)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »