AWS cli high security documentation change
Summary
Added SecurityPolicy parameter with TLS configuration options and updated syntax
Security assessment
Documents new security policy enforcement for TLS versions/cipher suites during domain updates, mitigating risks of weak cryptographic protocols.
Diff
diff --git a/cli/latest/reference/cognito-idp/update-user-pool-domain.md b/cli/latest/reference/cognito-idp/update-user-pool-domain.md index dad483330..24a9646fe 100644 --- a//cli/latest/reference/cognito-idp/update-user-pool-domain.md +++ b//cli/latest/reference/cognito-idp/update-user-pool-domain.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -163,0 +164,18 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit +> +> SecurityPolicy -> (string) +> +>> The security policy for the custom domain. Defines the minimum TLS version and cipher suites that CloudFront uses when communicating with viewers (clients). Valid values are as follows: +>> +>> * `TLS_V1` : Supports TLS 1.0 and later. Provides the broadest client compatibility. +>> * `TLS_V1_2_2021` : Supports TLS 1.2 and later with 2021 cipher suites. Recommended minimum for most use cases. +>> * `TLS_V1_3_2025` : Supports TLS 1.3 and later with 2025 cipher suites. Provides the strongest security posture. +>> + +>> +>> Possible values: +>> +>> * `TLS_V1` +>> * `TLS_V1_2_2021` +>> * `TLS_V1_3_2025` +>> + @@ -168 +186 @@ Shorthand Syntax: - CertificateArn=string + CertificateArn=string,SecurityPolicy=string @@ -175 +193,2 @@ JSON Syntax: - "CertificateArn": "string" + "CertificateArn": "string", + "SecurityPolicy": "TLS_V1"|"TLS_V1_2_2021"|"TLS_V1_3_2025" @@ -424 +443 @@ Routing -> (structure) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »