AWS solutions medium security documentation change
Summary
Added documentation for v8.0.0 breaking changes, migration paths, and separate update instructions for Lambda/ECS architectures. Updated template references and parameter links.
Security assessment
The changes explicitly mention security updates as part of the Lambda architecture update path ('Existing deployments can be updated to v8.0.0 Lambda template for maintenance and security updates'). This indicates the update includes security improvements, though no specific vulnerabilities are disclosed. The documentation adds guidance about maintaining security through updates.
Diff
diff --git a/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/update-the-solution.md b/solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/update-the-solution.md index 3006e7eb0..78b149835 100644 --- a//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/update-the-solution.md +++ b//solutions/latest/dynamic-image-transformation-for-amazon-cloudfront/update-the-solution.md @@ -5 +5 @@ -Backward compatibility +Update Lambda architectureUpdate ECS architectureBackward compatibility @@ -18,0 +19,23 @@ Modifying the architecture of an existing deployment by changing the value of th +###### Important + +**Version 8.0.0 Breaking Changes:** + +Dynamic Image Transformation for Amazon CloudFront version 8.0.0 introduces significant architectural changes and is **not compatible** with previous versions. This release includes: + + * **New ECS Architecture** : The new high-performance container-based architecture cannot be deployed as an update to existing stacks + + * **Breaking Changes** : Version 8.0.0 includes fundamental changes to the solution architecture, configuration, and feature set + + * **Clean Deployment Required** : To use the ECS architecture or any v8.0.0 features, you must deploy a **new stack** using the v8.0.0 CloudFormation template + + + + +**Migration Path:** \- **Lambda Architecture** : Existing deployments can be updated to v8.0.0 Lambda template for maintenance and security updates \- **ECS Architecture** : Requires a completely new deployment - cannot be updated from any previous version \- **Feature Access** : Advanced features (transformation policies, non-S3 origins, Admin UI) are only available in the new ECS architecture + +**Recommendation** : Deploy the new ECS architecture as a separate stack, test thoroughly, then migrate traffic and [uninstall](./uninstall-the-solution.html) the previous version. + +## Update Lambda architecture + +Follow these steps to update an existing Lambda architecture deployment to the latest version: + @@ -27 +50 @@ Modifying the architecture of an existing deployment by changing the value of th - 2. Copy the link of the `dynamic-image-transformation-for-amazon-cloudfront.template` [AWS CloudFormation template](./aws-cloudformation-template.html). + 2. Copy the link of the `dynamic-image-transformation-for-amazon-cloudfront-lambda.template` [AWS CloudFormation template](./aws-cloudformation-template.html). @@ -33 +56 @@ Modifying the architecture of an existing deployment by changing the value of th - 1. For example: ` [https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/latest/dynamic-image-transformation-for-amazon-cloudfront.template](https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/latest/dynamic-image-transformation-for-amazon-cloudfront.template) ` would become ` [https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/v7.0.0/dynamic-image-transformation-for-amazon-cloudfront.template](https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/v7.0.0/dynamic-image-transformation-for-amazon-cloudfront.template) ` + 1. For example: ` [https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/latest/dynamic-image-transformation-for-amazon-cloudfront-lambda.template](https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/latest/dynamic-image-transformation-for-amazon-cloudfront-lambda.template) ` would become ` [https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/v8.0.0/dynamic-image-transformation-for-amazon-cloudfront-lambda.template](https://solutions-reference.s3.amazonaws.com/dynamic-image-transformation-for-amazon-cloudfront/v8.0.0/dynamic-image-transformation-for-amazon-cloudfront-lambda.template) ` @@ -44 +67 @@ Alongside the rename in v7.0.0 from Serverless Image Handler to Dynamic Image Tr - 1. Under **Parameters** , review the parameters for the template and modify them as necessary. For details about the parameters, see [Deployment process overview](./launch-stack.html). + 1. Under **Parameters** , review the parameters for the template and modify them as necessary. For details about the parameters, see [Lambda architecture template parameters](./deploy-api-gateway-lambda.html#lambda-parameters). @@ -60,0 +84,4 @@ You can view the status of the stack in the AWS CloudFormation console in the ** +## Update ECS architecture + +The ECS architecture requires a **new deployment** for v8.0.0. + @@ -62,0 +90,4 @@ You can view the status of the stack in the AWS CloudFormation console in the ** +###### Note + +**Lambda Architecture Only** : The backward compatibility features described in this section only apply to the Lambda architecture template. The ECS architecture uses a different request format and does not support legacy Thumbor or custom request formats. +