AWS AmazonCloudFront documentation change
Summary
Added documentation for 'Connection logs' and 'Mutual authentication' features, including new sections explaining these capabilities
Security assessment
Introduces documentation for mutual TLS (mTLS) authentication and connection logging - security features that enhance authentication and observability, but does not indicate remediation of a specific vulnerability
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesGeneral.md b/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesGeneral.md index 09b801a3b..d58df4ec7 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesGeneral.md +++ b//AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesGeneral.md @@ -5 +5 @@ -Price classAWS WAF web ACLAlternate domain names (CNAMEs)SSL certificateCustom SSL client supportSecurity policy (minimum SSL/TLS version)Supported HTTP versionsDefault root objectStandard loggingLog prefixCookie loggingEnable IPv6 (viewer requests)Enable IPv6 for custom origins (origin requests)CommentDistribution state +Price classAWS WAF web ACLAlternate domain names (CNAMEs)SSL certificateCustom SSL client supportSecurity policy (minimum SSL/TLS version)Supported HTTP versionsDefault root objectStandard loggingConnection logsLog prefixCookie loggingEnable IPv6 (viewer requests)Mutual authenticationEnable IPv6 for custom origins (origin requests)CommentDistribution state @@ -30,0 +31,2 @@ The following values apply to the entire distribution. + * Connection logs + @@ -36,0 +39,2 @@ The following values apply to the entire distribution. + * Mutual authentication + @@ -242,0 +247,6 @@ CloudFront supports the following standard logging options: +## Connection logs + +When you turn on mutual authentication for your distribution, CloudFront provides connection logs that capture attributes about the requests sent to your distributions. Connection logs contain information such as the client IP address and port, client certificate information, connection results, and TLS ciphers being used. These connection logs can then be used to review request patterns and other trends. + +To learn more about connection logs, see [Observability using connection logs](./connection-logs.html). + @@ -258,0 +269,4 @@ If you want CloudFront to respond to viewer requests from IPv4 and IPv6 IP addre +## Mutual authentication + +Optional. You can choose to turn on mutual authentication for your CloudFront distribution. For more information, see [Mutual TLS (mTLS) viewer](./mtls-authentication.html). +