AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-03-30 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.md

Summary

Added IpAddressType property to control allowed IP versions for API Gateway domain names

Security assessment

Introduces IP address type restrictions (IPv4/dualstack) as a security control feature for domain name endpoints

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.md b/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.md
index 31e80ed61..d2985f4a1 100644
--- a/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.md
+++ b/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-domainname-endpointconfiguration.md
@@ -7 +7 @@ SyntaxPropertiesSee also
-The `EndpointConfiguration` property type specifies the endpoint types of an Amazon API Gateway domain name.
+The `EndpointConfiguration` property type specifies the endpoint types and IP address types of an Amazon API Gateway domain name.
@@ -18,0 +19 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      "IpAddressType" : String,
@@ -25,0 +27 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      IpAddressType: String
@@ -31,0 +34,11 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+`IpAddressType`
+    
+
+The IP address types that can invoke this DomainName. Use `ipv4` to allow only IPv4 addresses to invoke this DomainName, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke this DomainName. For the `PRIVATE` endpoint type, only `dualstack` is supported.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+