AWS Security ChangesHomeSearch

AWS general documentation change

Service: general · 2025-11-22 · Documentation low

File: general/latest/gr/cf_region.md

Summary

Added documentation for CloudFront trust store quotas and security-related service limits

Security assessment

The changes document security-related service quotas for trust stores (e.g., CA bundle sizes, certificate limits), which are tied to TLS/SSL certificate management. While these relate to security features, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/general/latest/gr/cf_region.md b/general/latest/gr/cf_region.md
index 4599ed6d5..f2e5b498c 100644
--- a//general/latest/gr/cf_region.md
+++ b//general/latest/gr/cf_region.md
@@ -70,0 +71,2 @@ Length of the content security policy value in a response headers policy | Each
+Maximum CA bundle size per trust store | Each supported Region: 64 Kilobytes |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-59F2769C) | The maximum size (in KB) of a CA bundle that can be uploaded to a trust store.  
+Maximum certificate size in trust store CA bundle | Each supported Region: 16 Kilobytes |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-E55DEA80) | The maximum size (in KB) of an individual certificate within a trust stores CA bundle.  
@@ -79,0 +82 @@ Maximum number of aliases per distribution tenant | Each supported Region: 100 |
+Maximum number of certificates per trust store | Each supported Region: 25 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-061D6ADD) | The maximum number of certificates that you can have for a trust store.  
@@ -81,0 +85 @@ Maximum number of characters total for all whitelisted query strings in the same
+Maximum number of connection functions per AWS account | Each supported Region: 0 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-D0422299) | The maximum number of connection functions that you can have for an AWS account.  
@@ -84,0 +89 @@ Maximum number of distribution tenants per AWS account | Each supported Region:
+Maximum number of distributions associated with the same trust store | Each supported Region: 25 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-3FC44142) | The maximum number of distributions that can be associated with a single trust store.  
@@ -94,0 +100 @@ Maximum number of query argument profile mappings that can be included in a fiel
+Maximum number of trust stores per AWS account | Each supported Region: 20 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/cloudfront/quotas/L-F6F30A7D) | The maximum number of trust stores that you can have for an AWS account.