AWS cli high security documentation change
Summary
Added documentation for SecurityPolicy parameter defining TLS versions and cipher suites for custom domains
Security assessment
This change documents security policies that enforce minimum TLS versions and cipher suites, directly addressing transport layer security configurations to prevent weak protocol vulnerabilities.
Diff
diff --git a/cli/latest/reference/cognito-idp/describe-user-pool-domain.md b/cli/latest/reference/cognito-idp/describe-user-pool-domain.md index 93be2e43e..7067ad2fa 100644 --- a//cli/latest/reference/cognito-idp/describe-user-pool-domain.md +++ b//cli/latest/reference/cognito-idp/describe-user-pool-domain.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -366,0 +367,18 @@ DomainDescription -> (structure) +>> +>> SecurityPolicy -> (string) +>> +>>> The security policy for the custom domain. Defines the minimum TLS version and cipher suites that CloudFront uses when communicating with viewers (clients). Valid values are as follows: +>>> +>>> * `TLS_V1` : Supports TLS 1.0 and later. Provides the broadest client compatibility. +>>> * `TLS_V1_2_2021` : Supports TLS 1.2 and later with 2021 cipher suites. Recommended minimum for most use cases. +>>> * `TLS_V1_3_2025` : Supports TLS 1.3 and later with 2025 cipher suites. Provides the strongest security posture. +>>> + +>>> +>>> Possible values: +>>> +>>> * `TLS_V1` +>>> * `TLS_V1_2_2021` +>>> * `TLS_V1_3_2025` +>>> + @@ -413 +431 @@ DomainDescription -> (structure) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »