AWS solutions medium security documentation change
Summary
Updated AWS Regions list with region codes and added CloudFront access logging limitations in specific regions
Security assessment
The change documents that CloudFront access logging is disabled in 4 regions, impacting security monitoring capabilities. This creates a security visibility gap for deployments in those regions unless manually configured.
Diff
diff --git a/solutions/latest/deepracer-on-aws/plan-your-deployment.md b/solutions/latest/deepracer-on-aws/plan-your-deployment.md index 9693dcbc3..a1ed7ac1f 100644 --- a//solutions/latest/deepracer-on-aws/plan-your-deployment.md +++ b//solutions/latest/deepracer-on-aws/plan-your-deployment.md @@ -22 +22 @@ This section provides an overview of the cost, security, service quotas, and oth -DeepRacer on AWS is available in the following regions: +DeepRacer on AWS is available in the following AWS Regions. @@ -24 +24 @@ DeepRacer on AWS is available in the following regions: -Regions | +Region Name | Region Code @@ -26,8 +26,39 @@ Regions | -US East (N. Virginia) | US East (Ohio) -US West (Oregon) | Africa (Cape Town) -Asia Pacific (Sydney) | Asia Pacific (Seoul) -Asia Pacific (Tokyo) | Asia Pacific (Mumbai) -Asia Pacific (Singapore) | Middle East (Bahrain) -Canada (Central) | Europe (Frankfurt) -Europe (Ireland) | Europe (London) -Europe (Paris) | Europe (Spain) +US East (N. Virginia) | us-east-1 +US East (Ohio) | us-east-2 +US West (Oregon) | us-west-2 +Africa (Cape Town) | af-south-1 +Asia Pacific (Hong Kong) | ap-east-1 +Asia Pacific (Mumbai) | ap-south-1 +Asia Pacific (Seoul) | ap-northeast-2 +Asia Pacific (Singapore) | ap-southeast-1 +Asia Pacific (Sydney) | ap-southeast-2 +Asia Pacific (Tokyo) | ap-northeast-1 +Canada (Central) | ca-central-1 +Europe (Frankfurt) | eu-central-1 +Europe (Ireland) | eu-west-1 +Europe (London) | eu-west-2 +Europe (Paris) | eu-west-3 +Europe (Spain) | eu-south-2 +Middle East (Bahrain) | me-south-1 +South America (São Paulo) | sa-east-1 + +For the most current availability of AWS services by Region, see the [AWS Regional Services List](https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/). + +###### Important + +**CloudFront Access Logging Limitation** + +CloudFront access logging is automatically disabled in the following regions due to lack of support for standard logging (legacy): + + * Africa (Cape Town) - `af-south-1` + + * Asia Pacific (Hong Kong) - `ap-east-1` + + * Europe (Spain) - `eu-south-2` + + * Middle East (Bahrain) - `me-south-1` + + + + +If you deploy the solution in one of these regions, the CloudFront distribution will function normally but will not generate access logs. If access logging is required for your use case, you can manually configure CloudFront Standard Logging V2 after deployment. For more information, refer to the [CloudFront Standard Logging V2 documentation](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/standard-logging.html).