service
Amazon CloudFront: security advisories, deprecations and releases
Content delivery network from AWS.
- Items, 90 days
- 5
- Critical
- 0
- Last critical
- none
- This week
- 3
What your digest would have held this week
3 items from the last 7 days. Zero sends only the ones that touch your stack.
Releases 5
- INFO NEW THIS WEEK AWS What's New · 2 Nov 2026
Amazon CloudFront adds self-service quota increases
CloudFront now integrates with AWS Service Quotas console and API, letting customers view, monitor, and auto-approve increases for 28 quotas.
- INFO NEW THIS WEEK AWS What's New · 30 Oct 2026
Amazon CloudFront adds viewer ISP and post-quantum TLS headers
CloudFront can now forward CloudFront-Viewer-ISP and CloudFront-Viewer-TLS-Details headers to origins, allowing traffic analysis by ISP and visibility into post-quantum cryptography usage.
- INFO NEW THIS WEEK AWS What's New · 30 Oct 2026
AWS WAF automatic SDK integration for CloudFront
AWS WAF can now automatically inject the JavaScript SDK into HTML served by CloudFront, supplying client signals for Bot Control, ATP, and ACFP without code changes.
- INFO AWS What's New · 16 Oct 2026
Amazon CloudFront announces dual-stack support for VPC origins
CloudFront now supports end-to-end IPv6 delivery to private VPC origins, letting customers keep ALBs, NLBs, and EC2 instances in private subnets while meeting IPv6 requirements.
- INFO AWS What's New · 13 Oct 2026
Amazon CloudFront supports AWS Lambda Web Functions as origin
CloudFront now serves web apps on Lambda Web Functions with edge TLS termination, caching, custom domains, OAC, DDoS protection, and WAF support.
Only hear about Amazon CloudFront when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.