AWS appconfig medium security documentation change
Summary
Added documentation for HTTP_HOST environment variable controlling network binding behavior.
Security assessment
Explicitly documents security-focused default binding behavior (localhost-only for EC2/on-prem) to prevent unintended network exposure. Mitigates risk of unauthorized access by restricting network interfaces.
Diff
diff --git a/appconfig/latest/userguide/appconfig-integration-containers-agent-configuring.md b/appconfig/latest/userguide/appconfig-integration-containers-agent-configuring.md index 089b3dea6..af03bd378 100644 --- a//appconfig/latest/userguide/appconfig-integration-containers-agent-configuring.md +++ b//appconfig/latest/userguide/appconfig-integration-containers-agent-configuring.md @@ -28,0 +29,18 @@ Configurations backed up to disk are not encrypted. If your configuration contai +`HTTP_HOST` | The HTTP_HOST variable controls how the AWS AppConfig Agent binds to network interfaces. The binding behavior differs based on the runtime environment to ensure optimal security and accessibility. | ECS, EKS + + * Default binding: All network interfaces (0.0.0.0) + +EC2 and on-prem + + * Default binding: localhost only + * IPv4 address: 127.0.0.1:2772 + * IPv6 address: [::1]:2772 + +| Custom Configuration Options. You can override the default behavior using these values: + + * ` all` (binds to all interfaces) + * `localhost`(explicitly binds to localhost interfaces) + * Specific IP address (e.g `192.168.1.1`) + * Custom hostname + +