AWS neptune documentation change
Summary
Updated common error documentation with improved descriptions, corrected HTTP status codes, added new error types (ExpiredTokenException, UnrecognizedClientException), and removed IncompleteSignature error
Security assessment
The changes improve documentation of security-related error responses (AccessDeniedException, ExpiredTokenException, UnrecognizedClientException) with clearer guidance on authentication and authorization failures, but there's no evidence of addressing a specific security vulnerability or incident. The corrections to HTTP status codes (400→403 for AccessDeniedException, 400→401 for UnauthorizedOperation) provide more accurate security signaling but are documentation improvements rather than vulnerability fixes.
Diff
diff --git a/neptune/latest/apiref/CommonErrors.md b/neptune/latest/apiref/CommonErrors.md index 581c01292..61ec2fb68 100644 --- a//neptune/latest/apiref/CommonErrors.md +++ b//neptune/latest/apiref/CommonErrors.md @@ -5 +5 @@ -# Common Errors +# Common Error Types @@ -7 +7 @@ -This section lists the errors common to the API actions of all AWS services. For errors specific to an API action for this service, see the topic for that API action. +This section lists common error types that this AWS service may return. Not all services return all error types listed here. For errors specific to an API action for this service, see the topic for that API action. @@ -12 +12 @@ This section lists the errors common to the API actions of all AWS services. For -You do not have sufficient access to perform this action. +You don't have permission to perform this action. Verify that your IAM policy includes the required permissions. @@ -14,8 +14 @@ You do not have sufficient access to perform this action. -HTTP Status Code: 400 - -**IncompleteSignature** - - -The request signature does not conform to AWS standards. - -HTTP Status Code: 400 +HTTP Status Code: 403 @@ -23 +16 @@ HTTP Status Code: 400 -**InternalFailure** +**ExpiredTokenException** @@ -26 +19 @@ HTTP Status Code: 400 -The request processing has failed because of an unknown error, exception or failure. +The security token included in the request has expired. Request a new security token and try again. @@ -28 +21 @@ The request processing has failed because of an unknown error, exception or fail -HTTP Status Code: 500 +HTTP Status Code: 403 @@ -30 +23 @@ HTTP Status Code: 500 -**InvalidAction** +**IncompleteSignature** @@ -33 +26 @@ HTTP Status Code: 500 -The action or operation requested is invalid. Verify that the action is typed correctly. +The request signature doesn't conform to AWS standards. Verify that you're using valid AWS credentials and that your request is properly formatted. If you're using an SDK, ensure it's up to date. @@ -37 +30 @@ HTTP Status Code: 400 -**InvalidClientTokenId** +**InternalFailure** @@ -40 +33 @@ HTTP Status Code: 400 -The X.509 certificate or AWS access key ID provided does not exist in our records. +The request can't be processed right now because of an internal server issue. Try again later. If the problem persists, contact AWS Support. @@ -42 +35 @@ The X.509 certificate or AWS access key ID provided does not exist in our record -HTTP Status Code: 403 +HTTP Status Code: 500 @@ -47 +40 @@ HTTP Status Code: 403 -Parameters that must not be used together were used together. +Parameters that must not be used together were used together. Remove one of the conflicting parameters and try again. @@ -54 +47 @@ HTTP Status Code: 400 -An invalid or out-of-range value was supplied for the input parameter. +A value that you provided for a parameter isn't valid. Check the parameter constraints and try again. @@ -61 +54 @@ HTTP Status Code: 400 -The AWS query string is malformed or does not adhere to AWS standards. +The AWS query string is malformed or doesn't adhere to AWS standards. Verify the query string format and try again. @@ -68 +61 @@ HTTP Status Code: 400 -The query string contains a syntax error. +The query string contains a syntax error. Verify the query string and try again. @@ -75 +68 @@ HTTP Status Code: 404 -The request is missing an action or a required parameter. +The request is missing the Action parameter. Add the Action parameter and try again. @@ -82 +75 @@ HTTP Status Code: 400 -The request must contain either a valid (registered) AWS access key ID or X.509 certificate. +The request must contain a valid AWS access key ID or X.509 certificate. Verify that your credentials are included in the request. @@ -89 +82 @@ HTTP Status Code: 403 -A required parameter for the specified action is not supplied. +A required parameter for the specified action isn't included in the request. Add the missing parameter and try again. @@ -96 +89 @@ HTTP Status Code: 400 -You do not have permission to perform this action. +You don't have permissions to perform this action. Verify that your IAM policy includes the required permissions. @@ -98 +91 @@ You do not have permission to perform this action. -HTTP Status Code: 400 +HTTP Status Code: 401 @@ -103 +96 @@ HTTP Status Code: 400 -The AWS access key ID needs a subscription for the service. +Your AWS account needs a subscription for this service. Verify that you've enabled the service in your account. @@ -110 +103 @@ HTTP Status Code: 403 -The request reached the service more than 15 minutes after the date stamp on the request or more than 15 minutes after the request expiration date (such as for pre-signed URLs), or the date stamp on the request is more than 15 minutes in the future. +The request has expired. This can happen if the request took more than 15 minutes to reach the service, the date stamp is more than 15 minutes in the future, or a pre-signed URL has expired. Generate a new request with a current timestamp and try again. @@ -117 +110 @@ HTTP Status Code: 400 -The request has failed due to a temporary failure of the server. +The service is temporarily unavailable. Try again later. @@ -124 +117 @@ HTTP Status Code: 503 -The request was denied due to request throttling. +Your request rate is too high. The AWS SDKs automatically retry requests that receive this exception. Reduce the frequency of requests. @@ -127,0 +121,7 @@ HTTP Status Code: 400 +**UnrecognizedClientException** + + +The X.509 certificate or AWS access key ID you provided doesn't exist in our records. Verify that you're using valid credentials and that they haven't expired. + +HTTP Status Code: 403 + @@ -131 +131 @@ HTTP Status Code: 400 -The input fails to satisfy the constraints specified by an AWS service. +The input doesn't meet the required format or constraints. Check that all required parameters are included and that values are valid.