AWS general medium security documentation change
Summary
Added new service quota limits for GetConnection, ListSubscriptions and SendDirectMessage APIs, and updated publish request description
Security assessment
Added documentation for rate limiting (GetConnection, ListSubscriptions, SendDirectMessage) which are security controls against DDoS/abuse. Specifically notes that exceeding quotas discards messages (L-083F3861). Security issue related due to explicit abuse prevention mechanisms.
Diff
diff --git a/general/latest/gr/iot-core.md b/general/latest/gr/iot-core.md index 8da9aba18..93d8587e3 100644 --- a//general/latest/gr/iot-core.md +++ b//general/latest/gr/iot-core.md @@ -544,0 +545,5 @@ Limit display name | Description | Default value | Default value in select AWS R +`GetConnection requests per second per client ID` | AWS IoT Core restricts GetConnection requests from the same account and client ID to 1 request per second. | 1 | 1 | No +[`GetConnection API TPS`](https://console.aws.amazon.com/servicequotas/home/services/iotcore/quotas/L-8DDC8969) | The maximum number of GetConnection API requests per second per account. | 100 | 100 | Yes +`ListSubscriptions requests per second per client ID` | AWS IoT Core restricts ListSubscriptions requests from the same account and client ID to 1 request per second. | 1 | 1 | No +[`ListSubscriptions API TPS`](https://console.aws.amazon.com/servicequotas/home/services/iotcore/quotas/L-AB85397C) | The maximum number of ListSubscriptions API requests per second per account. | 100 | 100 | Yes +[`SendDirectMessage API TPS`](https://console.aws.amazon.com/servicequotas/home/services/iotcore/quotas/L-889910A2) | The maximum number of SendDirectMessage API requests per second per account. | 20000 | 2000 | Yes @@ -564 +569 @@ Limit display name | Description | Default value | Default value in select AWS R -[`Publish requests per second per connection`](https://console.aws.amazon.com/servicequotas/home/services/iotcore/quotas/L-083F3861) | AWS IoT Core restricts each client connection to a maximum number of inbound and outbound publish requests per second. This limit includes messages sent to offline persistent session. Publish requests that exceed that quota are discarded. | 100 | 100 | No +[`Publish requests per second per connection`](https://console.aws.amazon.com/servicequotas/home/services/iotcore/quotas/L-083F3861) | AWS IoT Core restricts each client connection to a maximum number of inbound and outbound publish requests per second. This limit includes messages sent to offline persistent session and messages sent via SendDirectMessage. Publish requests that exceed that quota are discarded. | 100 | 100 | No