AWS elasticloadbalancing documentation change
Summary
Split JWTSignatureValidationFailed error code into JWKSResponseInvalid and JWTSignatureValidationError with more granular descriptions
Security assessment
Improves error code specificity for JWT validation failures but doesn't indicate resolution of security vulnerabilities. Enhances monitoring capabilities for security features.
Diff
diff --git a/elasticloadbalancing/latest/application/load-balancer-access-logs.md b/elasticloadbalancing/latest/application/load-balancer-access-logs.md index 619e6cfc8..2c7bd1a5e 100644 --- a//elasticloadbalancing/latest/application/load-balancer-access-logs.md +++ b//elasticloadbalancing/latest/application/load-balancer-access-logs.md @@ -271 +271,2 @@ Code | Description | Metric -`JWTSignatureValidationFailed` | Failed to validate token signature for any reason including signature does not match, the public key was invalid and could not be converted to a decoding key, public key size was not 2K, Token is signed with an Unsupported Algorithm, the KID in the token is not present in the JWKS endpoint. | `JWTValidationFailureCount` +`JWKSResponseInvalid` | JWKS response has one or more of the following problems: Non-JSON format, Invalid characters, Invalid JWKS format, Missing/invalid mandatory JWKS attributes, Public key has unsupported algorithm, the public key could not be converted to a decoding key, public key size was not 2K. | `JWTValidationFailureCount` +`JWTSignatureValidationError` | Failed to validate token signature for any reason including signature does not match, Token is signed with an unsupported algorithm, The KID in the token is not present in the JWKS endpoint. | `JWTValidationFailureCount`