AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2025-03-30 · Documentation low

File: AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.md

Summary

Added IpAddressType property to control allowed IP versions for REST APIs

Security assessment

Adds configuration for restricting API invocation to specific IP address types as a security feature

Diff

diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.md b/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.md
index 33a75eb88..2a7a9b3d3 100644
--- a/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.md
+++ b/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.md
@@ -7 +7 @@ SyntaxPropertiesSee also
-The `EndpointConfiguration` property type specifies the endpoint types of a REST API.
+The `EndpointConfiguration` property type specifies the endpoint types and IP address types of a REST API.
@@ -18,0 +19 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      "IpAddressType" : String,
@@ -26,0 +28 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+      IpAddressType: String
@@ -34,0 +37,13 @@ To declare this entity in your AWS CloudFormation template, use the following sy
+`IpAddressType`
+    
+
+The IP address types that can invoke an API (RestApi). Use `ipv4` to allow only IPv4 addresses to invoke an API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke an API. For the `PRIVATE` endpoint type, only `dualstack` is supported.
+
+_Required_ : No
+
+ _Type_ : String
+
+ _Allowed values_ : `ipv4 | dualstack`
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+