AWS rtb-fabric documentation change
Summary
Added domain allowlisting requirement note and changed 'DNS name' to 'domain name' for TLS certificate validation
Security assessment
Introduces new security documentation about mandatory domain allowlisting process to prevent unauthorized endpoints. This enhances security controls but doesn't address a specific known vulnerability.
Diff
diff --git a/rtb-fabric/latest/userguide/managed-endpoints.md b/rtb-fabric/latest/userguide/managed-endpoints.md index fc1a916e1..5bb774a21 100644 --- a//rtb-fabric/latest/userguide/managed-endpoints.md +++ b//rtb-fabric/latest/userguide/managed-endpoints.md @@ -220,0 +221,4 @@ The `aws-auth` ConfigMap method is deprecated for EKS clusters that use the EKS +###### Note + +The domain name must be allowlisted by the RTB Fabric team for your account before you can create your responder gateway. Contact customer support for allowlisting process. + @@ -227 +231 @@ RTB Fabric can terminate the TLS connection from the requester on your behalf an - * **DNS name allowlisting** – You must provide RTB Fabric with a DNS name that matches the SAN of the TLS certificate from each bidder host. The DNS name must be allowlisted by the RTB Fabric team for your account before you can create your RTB application. + * **Domain name allowlisting** – You must provide RTB Fabric with a domain name that matches the SAN of the TLS certificate from each bidder host.