AWS aws-sdk-php high security documentation change
Summary
Added documentation for VpcEncryptionControl structures including configuration parameters, state management, and resource exclusions for various network components
Security assessment
The changes introduce encryption control configurations with modes like 'enforce' and 'monitor', which directly relate to data protection mechanisms. The documentation of encryption state management for network resources (gateways, VPC peering) indicates security-focused feature documentation rather than addressing a specific vulnerability.
Diff
diff --git a/aws-sdk-php/v3/api/api-ec2-2016-11-15.md index 0c54d2bcc..81cdd6a7c 100644 --- a/aws-sdk-php/v3/api/api-ec2-2016-11-15.md +++ b/aws-sdk-php/v3/api/api-ec2-2016-11-15.md @@ -220,0 +221 @@ Menu + * [IoTManagedIntegrations](namespace-Aws.iotmanagedintegrations.html) @@ -9631,0 +9633,36 @@ Checks whether you have the required permissions for the action, without actuall + 'EncryptionControl' => [ + 'Mode' => 'monitor|enforce', + 'ResourceExclusions' => [ + 'EgressOnlyInternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'InternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'NatGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VirtualPrivateGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VpcPeering' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + ], + 'State' => 'enforce-in-progress|monitor-in-progress|enforce-failed|monitor-failed|deleting|deleted|available', + 'StateMessage' => '<string>', + 'Tags' => [ + [ + 'Key' => '<string>', + 'Value' => '<string>', + ], + // ... + ], + 'VpcEncryptionControlId' => '<string>', + 'VpcId' => '<string>', + ], @@ -21550,0 +21588,36 @@ The tags to assign to the VPC. + 'EncryptionControl' => [ + 'Mode' => 'monitor|enforce', + 'ResourceExclusions' => [ + 'EgressOnlyInternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'InternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'NatGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VirtualPrivateGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VpcPeering' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + ], + 'State' => 'enforce-in-progress|monitor-in-progress|enforce-failed|monitor-failed|deleting|deleted|available', + 'StateMessage' => '<string>', + 'Tags' => [ + [ + 'Key' => '<string>', + 'Value' => '<string>', + ], + // ... + ], + 'VpcEncryptionControlId' => '<string>', + 'VpcId' => '<string>', + ], @@ -55689,0 +55763,36 @@ The IDs of the VPCs. + 'EncryptionControl' => [ + 'Mode' => 'monitor|enforce', + 'ResourceExclusions' => [ + 'EgressOnlyInternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'InternetGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'NatGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VirtualPrivateGateway' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + 'VpcPeering' => [ + 'State' => 'enabling|enabled|disabling|disabled', + 'StateMessage' => '<string>', + ], + ], + 'State' => 'enforce-in-progress|monitor-in-progress|enforce-failed|monitor-failed|deleting|deleted|available', + 'StateMessage' => '<string>', + 'Tags' => [ + [ + 'Key' => '<string>', + 'Value' => '<string>', + ], + // ... + ], + 'VpcEncryptionControlId' => '<string>', + 'VpcId' => '<string>', + ], @@ -123631,0 +123741,5 @@ The ID of the set of DHCP options you've associated with the VPC. +**EncryptionControl** + + + **Type:** _VpcEncryptionControl structure_ + @@ -123942,0 +124057,82 @@ The ID of the VPC. +### VpcEncryptionControl + +##### Members + +**Mode** + + + **Type:** _string_ + +**ResourceExclusions** + + + **Type:** _VpcEncryptionControlExclusions structure_ + +**State** + + + **Type:** _string_ + +**StateMessage** + + + **Type:** _string_ + +**Tags** + + + **Type:** _Array ofTag structures_ + +**VpcEncryptionControlId** + + + **Type:** _string_ + +**VpcId** + + + **Type:** _string_ + +### VpcEncryptionControlExclusion + +##### Members + +**State** + + + **Type:** _string_ + +**StateMessage** + + + **Type:** _string_ + +### VpcEncryptionControlExclusions + +##### Members + +**EgressOnlyInternetGateway** + + + **Type:** _VpcEncryptionControlExclusion structure_ + +**InternetGateway** + + + **Type:** _VpcEncryptionControlExclusion structure_ + +**NatGateway** + + + **Type:** _VpcEncryptionControlExclusion structure_ + +**VirtualPrivateGateway** + + + **Type:** _VpcEncryptionControlExclusion structure_