AWS elasticloadbalancing documentation change
Summary
Replaced 'ELB' with 'Elastic Load Balancing' in Lambda invocation permissions context
Security assessment
Terminology update without altering security guidance. The existing security recommendation about using aws:SourceArn/aws:SourceAccount to prevent confused deputy attacks remains unchanged and unaffected.
Diff
diff --git a/elasticloadbalancing/latest/application/lambda-functions.md b/elasticloadbalancing/latest/application/lambda-functions.md index 025cf9cb1..c739d76eb 100644 --- a//elasticloadbalancing/latest/application/lambda-functions.md +++ b//elasticloadbalancing/latest/application/lambda-functions.md @@ -59 +59 @@ The following recommendations apply if you are using your Lambda function with a -If you create the target group and register the Lambda function using the AWS Management Console, the console adds the required permissions to your Lambda function policy on your behalf. Otherwise, after you create the target group and register the function using the AWS CLI, you must use the [add-permission](https://docs.aws.amazon.com/cli/latest/reference/lambda/add-permission.html) command to grant ELB permission to invoke your Lambda function. We recommend that you use the `aws:SourceAccount` and `aws:SourceArn` condition keys to restrict function invocation to the specified target group. For more information, see [The confused deputy problem](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html) in the _IAM User Guide_ , +If you create the target group and register the Lambda function using the AWS Management Console, the console adds the required permissions to your Lambda function policy on your behalf. Otherwise, after you create the target group and register the function using the AWS CLI, you must use the [add-permission](https://docs.aws.amazon.com/cli/latest/reference/lambda/add-permission.html) command to grant Elastic Load Balancing permission to invoke your Lambda function. We recommend that you use the `aws:SourceAccount` and `aws:SourceArn` condition keys to restrict function invocation to the specified target group. For more information, see [The confused deputy problem](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html) in the _IAM User Guide_ ,