AWS lightsail documentation change
Summary
Added detailed step-by-step guide for configuring WordPress instance with HTTPS, including prerequisites, tips, and wizard workflow. Changed section headings from level 2 to level 6.
Security assessment
The changes add comprehensive documentation about enabling HTTPS and SSL/TLS certificates to encrypt WordPress traffic, which is a security feature. However, there's no evidence this addresses a specific security vulnerability or incident; it's general security documentation improvement.
Diff
diff --git a/lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md b/lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md index 33c41b8f6..018575b13 100644 --- a//lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md +++ b//lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md @@ -8,0 +9,57 @@ +You can configure your WordPress instance by using a guided, step-by-step workflow that will configure the following: + + * A registered domain name – Your WordPress site needs a domain name that is easy to remember. Users will specify this domain name to access your WordPress site. For more information, see [Register and manage domains for your website in Lightsail](./amazon-lightsail-domain-registration.html). + + * DNS management – You must decide how to manage the DNS records for your domain. A DNS record tells the DNS server which IP address or hostname a domain or subdomain is associated with. A DNS zone contains the DNS records for your domain. For more information, see [Understanding DNS in Lightsail](./understanding-dns-in-amazon-lightsail.html). + + * A Static IP address – The default public IP address for your WordPress instance changes if you stop and start your instance. When you attach a static IP address to your instance, it stays the same even if you stop and start your instance. For more information, see [View and manage IP addresses for Lightsail resources](./understanding-public-ip-and-private-ip-addresses-in-amazon-lightsail.html). + + * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. + + + + +###### Tip + +Review the following tips before you begin. For troubleshooting information, see [Troubleshooting WordPress setup](./amazon-lightsail-troubleshooting-wp-setup.html). + + * Your instance must be in a **Running** state. Allow a few minutes for the SSH connection to become ready if the instance was just started. + + * Ports 22, 80, and 443 on your instance firewall must allow TCP connections from any IP address while setup is running. For more information, see [Instance firewalls](./understanding-firewall-and-port-mappings-in-amazon-lightsail.html). + + * When you add or update DNS records that point traffic from your apex domain (`example.com`) and its `www` subdomains (`www.example.com`), they will need to propagate throughout the Internet. You can verify that your DNS changes have taken effect by using tools such as [nslookup](https://aws.amazon.com/blogs//messaging-and-targeting/how-to-check-your-domain-verification-settings/), or [DNS Lookup](https://mxtoolbox.com/DnsLookup.aspx) from _MxToolbox_. + + * Let's Encrypt certificates will automatically renew every 60 to 90 days. + + * While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. + + + + +###### To configure your instance using the website setup wizard + + 1. On the instance management page, on the **Connect** tab, choose **Set up your website**. + + + + 2. For **Specify a domain name** , use an existing Lightsail managed domain, register a new domain with Lightsail, or use a domain that you registered by using another domain registrar. Choose **Use this domain** to go to the next step. + + 3. For **Configure DNS** , do one of the following: + + * Choose **Lightsail managed domain** to use a Lightsail DNS zone. Choose **Use this DNS zone** to go to the next step. + + * Choose **Third-party domain** to use the hosting service that manages the DNS records for your domain. Note that we create a matching DNS zone in your Lightsail account in case you decide to use it later on. Choose **Use third-party DNS** to go to the next step. + + 4. For **Create a static IP address** , enter a name for your static IP address and then choose **Create static IP**. + + 5. For **Manage domain assignments** , choose **Add assignment** , choose a domain type, and then choose **Add**. Choose **Continue** to go to the next step. + + 6. For **Create an SSL/TLS certificate** , choose your domains and subdomains, enter an email address, select **I authorize Lightsail to configure a Let's Encrypt certificate on my instance** , and choose **Create certificate**. We start to configure the Lightsail resources. + +While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. + + 7. After the website setup is complete, verify that the URLs that you specified in the domain assignments step open your WordPress site. + + + + @@ -20 +77 @@ Lightsail -## Step 1: Configure your WordPress instance +###### Step 1: Configure your WordPress instance @@ -30 +87 @@ You can configure your WordPress instance by using a guided, step-by-step workfl - * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see [Secure your WordPress site with HTTPS on Lightsail](./amazon-lightsail-enabling-https-on-wordpress.html). + * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. @@ -79 +136 @@ While setup is in progress, do not stop or make changes to your instance. It can -## Step 2: Get the admin password for your WordPress website +###### Step 2: Get the admin password for your WordPress website @@ -102 +159 @@ The default password to sign in to the administration dashboard of your WordPres -## Step 3: Sign in to the administration dashboard of your WordPress website +###### Step 3: Sign in to the administration dashboard of your WordPress website @@ -136 +193 @@ Bitnami -## Step 1: Configure your WordPress instance +###### Step 1: Configure your WordPress instance @@ -146 +203 @@ You can configure your WordPress instance by using a guided, step-by-step workfl - * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see [Secure your WordPress site with HTTPS on Lightsail](./amazon-lightsail-enabling-https-on-wordpress.html). + * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. @@ -205 +262 @@ If your blueprint does not support the guided workflow, you can use `bncert` to -## Step 2: Get the admin password for your WordPress website +###### Step 2: Get the admin password for your WordPress website @@ -228 +285 @@ The default password to sign in to the administration dashboard of your WordPres -## Step 3: Sign in to the administration dashboard of your WordPress website +###### Step 3: Sign in to the administration dashboard of your WordPress website