AWS lightsail: Add customErrorResponses, defaultRootObject, enablePrivateOriginAccess params
Summary
Adds new request parameters to UpdateDistribution: customErrorResponses, defaultRootObject, and enablePrivateOriginAccess, including documentation of private origin access for Lightsail buckets.
Security assessment
The new enablePrivateOriginAccess parameter documents a security-relevant access-control feature that lets a distribution read non-public bucket objects while noting it does not change bucket access settings, which is security guidance rather than a fix for a specific vulnerability.
Evidence
+Specifies whether to enable private origin access for the distribution. With private origin access, the distribution can serve objects that aren't publicly accessible from a Lightsail bucket.
Diff
diff --git a/lightsail/2016-11-28/api-reference/API_UpdateDistribution.md b/lightsail/2016-11-28/api-reference/API_UpdateDistribution.md index cd0d17d15..7f906cc3c 100644 --- a//lightsail/2016-11-28/api-reference/API_UpdateDistribution.md +++ b//lightsail/2016-11-28/api-reference/API_UpdateDistribution.md @@ -44,0 +45,8 @@ Use this action to update the configuration of your existing distribution. + "customErrorResponses": [ + { + "[errorCachingMinTTL](./API_DistributionCustomErrorResponse.html#Lightsail-Type-DistributionCustomErrorResponse-errorCachingMinTTL)": number, + "[errorCode](./API_DistributionCustomErrorResponse.html#Lightsail-Type-DistributionCustomErrorResponse-errorCode)": number, + "[responseCode](./API_DistributionCustomErrorResponse.html#Lightsail-Type-DistributionCustomErrorResponse-responseCode)": "string", + "[responsePagePath](./API_DistributionCustomErrorResponse.html#Lightsail-Type-DistributionCustomErrorResponse-responsePagePath)": "string" + } + ], @@ -47,0 +56 @@ Use this action to update the configuration of your existing distribution. + "defaultRootObject": "string", @@ -48,0 +58 @@ Use this action to update the configuration of your existing distribution. + "enablePrivateOriginAccess": boolean, @@ -103,0 +114,9 @@ Required: No +**customErrorResponses ** + + +An array of objects that describe the custom error responses for the distribution. With a custom error response, you can specify the page to return when the origin responds with a given HTTP error code. You can also specify the HTTP status code to send to the viewer. + +Type: Array of [DistributionCustomErrorResponse](./API_DistributionCustomErrorResponse.html) objects + +Required: No + @@ -112,0 +132,9 @@ Required: No +**defaultRootObject ** + + +The object (for example, `index.html`) that the distribution returns when a viewer requests the root URL of the distribution (`/`) instead of a specific object. The object that you specify must be available from the origin. + +Type: String + +Required: No + @@ -125,0 +154,17 @@ Required: Yes +**enablePrivateOriginAccess ** + + +Specifies whether to enable private origin access for the distribution. With private origin access, the distribution can serve objects that aren't publicly accessible from a Lightsail bucket. + +Lightsail grants the distribution permission to read the bucket's objects. Enabling private origin access doesn't change the bucket's access settings, and you can still retrieve publicly accessible objects directly from the bucket's endpoint. + +###### Note + +When you include this parameter, you must also include the `origin` parameter with the resource name, even if the origin is not changing. + +You can enable private origin access only when the distribution's origin is a Lightsail bucket. If the origin is another resource type, the request fails. + +Type: Boolean + +Required: No + @@ -274 +319 @@ For more information about using this API in one of the language-specific AWS SD - * [AWS SDK for Python](https://docs.aws.amazon.com/goto/boto3/lightsail-2016-11-28/UpdateDistribution) + * [AWS SDK for Python (Boto3)](https://docs.aws.amazon.com/goto/boto3/lightsail-2016-11-28/UpdateDistribution)