AWS general documentation change
Summary
Updated documentation for FIPS and dual-stack endpoints: improved wording, added links to SDK/CLI guides, updated TLS requirements phrasing, corrected Amazon S3 endpoint syntax reference, and revised regional endpoint information.
Security assessment
Changes focus on clarifying FIPS endpoint usage (security feature for cryptographic compliance) and dual-stack endpoints. While FIPS relates to security standards, there's no evidence of a specific vulnerability being patched. Updates enhance existing security documentation by adding references to implementation guides and TLS requirements, but don't address new vulnerabilities.
Diff
diff --git a/general/latest/gr/rande.md b/general/latest/gr/rande.md index 0c622620d..a1d36509f 100644 --- a//general/latest/gr/rande.md +++ b//general/latest/gr/rande.md @@ -139 +139 @@ Some AWS services offer endpoints that support Federal Information Processing St -To specify a FIPS endpoint when you call an AWS operation, use a mechanism provided by the tool that you're using to make the call. For example, the AWS SDKs provide the following mechanisms to enable the use of FIPS endpoints: +To specify a FIPS endpoint when you call an AWS operation, use a mechanism provided by the tool that you're using to make the call. For example, the AWS SDKs provide the following mechanisms to use FIPS endpoints: @@ -148 +148,3 @@ To specify a FIPS endpoint when you call an AWS operation, use a mechanism provi -The AWS Command Line Interface supports these mechanisms, and also provides the `--endpoint-url` option. The following example uses `--endpoint-url` to specify the FIPS endpoint for AWS Key Management Service (AWS KMS) in the US West (Oregon) Region. +For information about FIPS endpoint support in AWS SDKs, see [Dual-stack and FIPS endpoints](https://docs.aws.amazon.com/sdkref/latest/guide/feature-endpoints.html) in the _AWS SDKs and Tools Reference Guide_. + +The AWS Command Line Interface supports the preceding mechanisms, and also provides the `--endpoint-url` option. The following example uses `--endpoint-url` to specify the FIPS endpoint for AWS Key Management Service (AWS KMS) in the US West (Oregon) Region. @@ -157 +159 @@ For a list of FIPS endpoints, see [FIPS endpoints by Service](https://aws.amazon -With FIPS endpoints, the minimum requirement is TLS 1.2. We recommend TLS 1.3. For information about how to determine whether your applications were impacted by this change, see [this AWS Security Blog post](https://aws.amazon.com/blogs/security/tls-1-2-confirm-your-connections/). +With FIPS endpoints, the minimum requirement is TLS 1.2. We recommend TLS 1.3. To determine whether your applications were affected by this change, see [this AWS Security Blog post](https://aws.amazon.com/blogs/security/tls-1-2-confirm-your-connections/). @@ -161 +163 @@ With FIPS endpoints, the minimum requirement is TLS 1.2. We recommend TLS 1.3. F -Some AWS services offer dual stack endpoints, so that you can access them using either IPv4 or IPv6 requests. In general, the syntax of a dual stack endpoint is as follows. +Some AWS services offer dual stack endpoints, so that you can access them using either IPv4 or IPv6 requests. In general, the syntax of a dual stack endpoint is as follows: @@ -166 +168 @@ Some AWS services offer dual stack endpoints, so that you can access them using -However, Amazon S3 uses the following syntax for its dual stack endpoints. +However, Amazon S3 uses the following syntax for [Amazon S3 dual stack endpoints](https://docs.aws.amazon.com/AmazonS3/latest/API/dual-stack-endpoints.html): @@ -171 +173,3 @@ However, Amazon S3 uses the following syntax for its dual stack endpoints. -To make a request to a dual stack endpoint, you must use the mechanism provided by the tool or AWS SDK to specify the endpoint. For example, the AWS CLI provides the `--endpoint-url` option. The following example uses `--endpoint-url` to specify the dual stack endpoint for Amazon EC2 in the US West (Oregon) Region. +To make a request to a dual stack endpoint, use the mechanism provided by the tool or AWS SDK to specify the endpoint. For information about dual stack endpoint support in AWS SDKs, see [Dual-stack and FIPS endpoints](https://docs.aws.amazon.com/sdkref/latest/guide/feature-endpoints.html) in the _AWS SDKs and Tools Reference Guide_. + +The AWS CLI provides the `--endpoint-url` option. The following example uses `--endpoint-url` to specify the dual stack endpoint for Amazon EC2 in the US West (Oregon) Region. @@ -175,0 +180,2 @@ To make a request to a dual stack endpoint, you must use the mechanism provided +To use the AWS CLI to configure dual-stack endpoints for all AWS services, see [Set to use dual-stack endpoints for all AWS services](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-endpoints.html#endpoints-dual-stack) in the _AWS Command Line Interface User Guide_. + @@ -182 +188 @@ You can find endpoint information from the following sources: - * To learn about enabling Regions that are disabled by default, see [Specifying which AWS Regions your account can use](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html) in the _AWS Account Management Reference Guide_. + * To enable Regions that are disabled by default, see [Enable or disable AWS Regions in your account](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html) in the _AWS Account Management Reference Guide_. @@ -184 +190 @@ You can find endpoint information from the following sources: - * For information about the AWS services and endpoints available in the China Regions, see [China (Beijing) Region Endpoints](https://docs.amazonaws.cn/en_us/aws/latest/userguide/endpoints-Beijing.html) and [China (Ningxia) Region Endpoints](https://docs.amazonaws.cn/en_us/aws/latest/userguide/endpoints-Ningxia.html). + * For information about the AWS services and endpoints available in the China Regions, see [China (Beijing) Region Endpoints](https://docs.amazonaws.cn/en_us/general/latest/gr/endpoints-Beijing.html) and [China (Ningxia) Region Endpoints](https://docs.amazonaws.cn/en_us/general/latest/gr/endpoints-Ningxia.html).