AWS Security ChangesHomeSearch

AWS AmazonCloudFront medium security documentation change

Service: AmazonCloudFront · 2025-11-22 · Security-related medium

File: AmazonCloudFront/latest/DeveloperGuide/WhatsNew.md

Summary

Updated IAM guidance link to include double slashes and align with best practices.

Security assessment

The change references IAM security best practices documentation, which is explicitly security-focused.

Diff

diff --git a/AmazonCloudFront/latest/DeveloperGuide/WhatsNew.md b/AmazonCloudFront/latest/DeveloperGuide/WhatsNew.md
index c76a04738..27dbd3952 100644
--- a//AmazonCloudFront/latest/DeveloperGuide/WhatsNew.md
+++ b//AmazonCloudFront/latest/DeveloperGuide/WhatsNew.md
@@ -10,0 +11,3 @@ Change| Description| Date
+[Updates to CloudFront Functions](./helper-functions-origin-modification.html)| This release adds parameters for the origin modification helper methods in CloudFront Functions. You can use the `hostHeader`, `sni`, `allowedCertificateNames`, and `originOverrides` parameters.| November 20, 2025  
+[Updates to CloudFront Functions](./cwt-support-cloudfront-functions.html)| Added CBOR Web Tokens (CWT) support for CloudFront Functions.| November 20, 2025  
+[Updates to CloudFront Functions](./general-helper-methods.html)| Added general helper methods for CloudFront Functions.| November 20, 2025  
@@ -25 +28 @@ Change| Description| Date
-CloudFront public endpoints now support IPv6| See [Amazon CloudFront endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/cf_region.html) in the _AWS General Reference_ and [AWS services that support IPv6](https://docs.aws.amazon.com/vpc/latest/userguide/aws-ipv6-support.html) in the _Amazon VPC User Guide_.| August 21, 2025  
+CloudFront public endpoints now support IPv6| See [Amazon CloudFront endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/cf_region.html) in the _AWS General Reference_ and [AWS services that support IPv6](https://docs.aws.amazon.com//vpc/latest/userguide/aws-ipv6-support.html) in the _Amazon VPC User Guide_.| August 21, 2025  
@@ -74 +77 @@ CloudFront public endpoints now support IPv6| See [Amazon CloudFront endpoints a
-[Updated the IAM guidance for CloudFront](./security-iam.html)| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html).| February 15, 2023  
+[Updated the IAM guidance for CloudFront](./security-iam.html)| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html).| February 15, 2023  
@@ -103 +106 @@ New pricing option| Amazon CloudFront introduces the _CloudFront security saving
-New tutorial| The _Amazon CloudFront Developer Guide_ now includes a tutorial for using Amazon CloudFront to restrict access to an Application Load Balancer in Elastic Load Balancing. For more information, see [Restricting access to Application Load Balancers](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html).| December 18, 2020  
+New tutorial| The _Amazon CloudFront Developer Guide_ now includes a tutorial for using Amazon CloudFront to restrict access to an Application Load Balancer in ELB. For more information, see [Restricting access to Application Load Balancers](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html).| December 18, 2020