AWS lightsail: Document isPrivateOriginAccessEnabled for distribution origin
Summary
Added documentation for the isPrivateOriginAccessEnabled boolean that controls whether a distribution can serve non-public objects from a Lightsail bucket.
Security assessment
Documents an access-control feature governing whether private bucket objects can be served via a distribution, which is security-relevant configuration guidance but not a fix for a specific vulnerability.
Evidence
Specifies whether private origin access is enabled for the distribution's origin. With private origin access, the distribution can serve objects that aren't publicly accessible from a Lightsail bucket.
Diff
diff --git a/lightsail/2016-11-28/api-reference/API_Origin.md b/lightsail/2016-11-28/api-reference/API_Origin.md index c51d7331c..c74dabf4a 100644 --- a//lightsail/2016-11-28/api-reference/API_Origin.md +++ b//lightsail/2016-11-28/api-reference/API_Origin.md @@ -29,0 +30,11 @@ Required: No +**isPrivateOriginAccessEnabled** + + +Specifies whether private origin access is enabled for the distribution's origin. With private origin access, the distribution can serve objects that aren't publicly accessible from a Lightsail bucket. + +This applies when you set the bucket's `getObject` access rule to `private`. It also applies when you set `getObject` to `public` but set individual objects to private. + +Type: Boolean + +Required: No +