AWS amazon-mq documentation change
Summary
Added documentation for the SSL certificate plugin supporting mutual TLS (mTLS) authentication using client certificates.
Security assessment
The change introduces documentation for a new security feature (mTLS authentication) but does not indicate any vulnerability fix. It enhances security by enabling certificate-based authentication without credential transmission.
Diff
diff --git a/amazon-mq/latest/developer-guide/rabbitmq-basic-elements-plugins.md b/amazon-mq/latest/developer-guide/rabbitmq-basic-elements-plugins.md index c16c75475..93e7e3984 100644 --- a//amazon-mq/latest/developer-guide/rabbitmq-basic-elements-plugins.md +++ b//amazon-mq/latest/developer-guide/rabbitmq-basic-elements-plugins.md @@ -5 +5 @@ -RabbitMQ management pluginShovel pluginFederation pluginConsistent Hash exchange pluginOAuth 2.0 pluginLDAP pluginHTTP pluginaws plugin +RabbitMQ management pluginShovel pluginFederation pluginConsistent Hash exchange pluginOAuth 2.0 pluginLDAP pluginHTTP pluginSSL certificate pluginaws plugin @@ -24,0 +25,2 @@ Amazon MQ for RabbitMQ also supports the following plugins. + * SSL certificate plugin + @@ -111,0 +114,8 @@ The HTTP authentication plugin is only available for Amazon MQ for RabbitMQ vers +## SSL certificate plugin + +Amazon MQ supports mutual TLS (mTLS) for RabbitMQ brokers. The [SSL authentication plugin](https://github.com/rabbitmq/rabbitmq-auth-mechanism-ssl) uses client certificates from mTLS connections to authenticate users. This plugin is conditionally enabled based on your broker configuration. When enabled, it provides certificate-based authentication using X.509 client certificates for strong authentication without transmitting credentials over the network. For more information about SSL certificate authentication, see [SSL certificate authentication](./ssl-for-amq-for-rabbitmq.html). + +###### Note + +The SSL certificate authentication plugin is only available for Amazon MQ for RabbitMQ version 4 and above. + @@ -122 +132 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -HTTP authentication and authorization +SSL certificate authentication