Increase the security of your named credentials with new configurations. To guard against attacks, content sniffing protection is enforced, and we recommend that you review your clickjack protection settings.
- Enable Content Sniffing Protection (Release Update)
Help shield your org and network from malicious attacks with content sniffing protection. This change helps prevent the browser from loading scripts disguised as other file types when your users access external content and websites from Salesforce. This update was first made available in Winter ’23 and was scheduled to be enforced in Spring ’23, but we postponed the enforcement date to Summer ’23. - Use AWS Roles Anywhere with Named Credentials
External credentials that employ the AWS Signature v4 protocol can now use Amazon’s Roles Anywhere service to secure AWS integrations via certificates. With Roles Anywhere for named credentials, it’s not necessary for AWS administrators to create IAM Users and store their keys in Salesforce. - Use OAuth JWT Bearer Flow with Named Credentials
Configure external credentials that use the OAuth protocol to use JWT Bearer Flow. JWT Bearer Flow provides increased security for system integrations by employing a JSON Web Token (JWT) and certificates to sign requests. Salesforce named credentials support custom claims with JWT Bearer Flow. - Make a Private Connection with Named Credentials
Configure named credentials with an outbound network connection so that API traffic to an AWS account is privately routed and doesn’t traverse the public internet. This feature has been added to non-legacy credentials. - Review Your Clickjack Protection Settings
Clickjacking uses a trusted domain or site to trick users into clicking a malicious link. The trusted domain is served in an iframe, then a hidden or transparent UI control is served in the same location. To help protect against this kind of attack, learn more about clickjacking and the Salesforce page types that can be framed. Then review your clickjack settings.