AWS amazon-mq high security documentation change

Service: amazon-mq · 2026-06-13 · Security-related high

File: amazon-mq/latest/developer-guide/rabbitmq-iam-tutorial.md

Summary

Changed configuration parameter from 'jwks_url' to 'jwks_uri' in RabbitMQ OAuth2 setup

Security assessment

Corrects a misconfiguration in OAuth2 setup that would cause authentication failures. Using the wrong parameter name ('jwks_url' instead of 'jwks_uri') would break token validation, creating an authentication bypass risk.

Diff

diff --git a/amazon-mq/latest/developer-guide/rabbitmq-iam-tutorial.md b/amazon-mq/latest/developer-guide/rabbitmq-iam-tutorial.md
index f58ba7759..8df3be62e 100644
--- a//amazon-mq/latest/developer-guide/rabbitmq-iam-tutorial.md
+++ b//amazon-mq/latest/developer-guide/rabbitmq-iam-tutorial.md
@@ -107 +107 @@ Create a RabbitMQ configuration file with OAuth2 authentication and authorizatio
-    auth_oauth2.jwks_url = ${ISSUER_IDENTIFIER}/.well-known/jwks.json
+    auth_oauth2.jwks_uri = ${ISSUER_IDENTIFIER}/.well-known/jwks.json