AWS vpc documentation change
Summary
Replaced traffic routing explanation with structured list of network considerations
Security assessment
Improves documentation clarity about AWS network routing but does not introduce security-related content or address security issues.
Diff
diff --git a/vpc/latest/userguide/how-it-works.md b/vpc/latest/userguide/how-it-works.md index 581934536..ee9132076 100644 --- a/vpc/latest/userguide/how-it-works.md +++ b/vpc/latest/userguide/how-it-works.md @@ -138 +138,8 @@ AWS provides a high-performance, and low-latency private global network that del -Packets that originate in the private global network with a destination in the private global network stay in the private global network and do not traverse the public internet. This is true whether the destination is a private IP address or a public IP address. For example, if EC2 instances in two VPCs communicate using public IP addresses, the traffic stays in the private global network. The destination can be in the same Availability Zone, a different Availability Zone in the same Region, or a different Region, except for the China Regions. +The following considerations apply: + + * Traffic that is in an Availability Zone, or between Availability Zones in all Regions, routes over the AWS private global network. + + * Traffic that is between Regions always routes over the AWS private global network, except for China Regions. + + +