AWS Security ChangesHomeSearch

AWS rtb-fabric medium security documentation change

Service: rtb-fabric · 2026-05-16 · Security-related medium

File: rtb-fabric/latest/userguide/working-with-responder-gateways.md

Summary

Clarified external gateway requirements for custom domains/certificates and added DNS record guidance

Security assessment

Explicitly ties external gateways to certificate association and custom domain security features. Emphasizes TLS termination capability and provides operational guidance for secure DNS configuration.

Diff

diff --git a/rtb-fabric/latest/userguide/working-with-responder-gateways.md b/rtb-fabric/latest/userguide/working-with-responder-gateways.md
index c5bbb0df7..4fda14d52 100644
--- a//rtb-fabric/latest/userguide/working-with-responder-gateways.md
+++ b//rtb-fabric/latest/userguide/working-with-responder-gateways.md
@@ -208 +208 @@ When logging is configured, default sampling behavior applies. Service logs capt
-Create an external responder gateway in RTB Fabric if you do not already have one. Inbound external links require an external gateway — a gateway type designed for receiving traffic from endpoints outside RTB Fabric.
+Create an external responder gateway in RTB Fabric if you do not already have one. Inbound external links with custom domains require an external gateway — a gateway type designed for receiving traffic from endpoints outside RTB Fabric. Standard (internal) responder gateways do not support inbound external links with custom domains features such as certificate association and routing rules.
@@ -216 +216 @@ Use the following command to create an external responder gateway using the AWS
-    --description "External gateway for inbound external links" \
+                        --description "External gateway for inbound external links with custom domains" \
@@ -231 +231 @@ Use the following command to create an external responder gateway using the AWS
-    --description "External gateway for inbound external links" \
+                        --description "External gateway for inbound external links with custom domains" \
@@ -259 +259 @@ Use the following command to create an external responder gateway using the AWS
-  * `--gateway-type EXTERNAL` — Required. Creates an external gateway that supports inbound external links.
+  * `--gateway-type EXTERNAL` — Required. Creates an external gateway that supports inbound external links with custom domains, certificate association, and routing rules.
@@ -269,0 +270,2 @@ Use the following command to create an external responder gateway using the AWS
+Record the gateway endpoint hostname (for example, `rtb-gw-abc123.123456789012.gateway.rtbfabric.us-east-1.amazonaws.com`). You need this value when updating DNS records to route traffic through your custom domain.
+
@@ -350 +352 @@ Deleting a responder gateway is permanent and cannot be undone. Check your gatew
-  3. If the gateway has associated links, a dialog appears with the message "To delete this gateway, you must first delete all of its associated links. You can delete links on the Links table." Follow the provided instructions to delete associated links first, then return to delete the gateway. For more information, see [Deleting links](./links.html#deleting-rtb-links).
+  3. If the gateway has associated links, a dialog appears with the message "To delete this gateway, you must first delete all of its associated links. You can delete links on the Links table." Follow the provided instructions to delete associated links first, then return to delete the gateway. For more information, see [Deleting links](./deleting-rtb-links.html).