AWS Security ChangesHomeSearch

AWS apigateway documentation change

Service: apigateway · 2025-03-30 · Documentation low

File: apigateway/latest/developerguide/apigateway-private-apis.md

Summary

Clarified IP address type restrictions for private APIs (dualstack only)

Security assessment

Updates documentation about supported IP types without security implications

Diff

diff --git a/apigateway/latest/developerguide/apigateway-private-apis.md b/apigateway/latest/developerguide/apigateway-private-apis.md
index 0763f5ed6..d0918b64f 100644
--- a/apigateway/latest/developerguide/apigateway-private-apis.md
+++ b/apigateway/latest/developerguide/apigateway-private-apis.md
@@ -44 +44,3 @@ The following considerations might impact your use of private APIs:
-  * You can send traffic using all IP address types supported by Amazon VPC. You can send dualstack and IPv6 traffic by configuring the settings on your VPC endpoint. You can't modify this using API Gateway. For more information, see [Add IPv6 support for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-migrate-ipv6-add.html).
+  * You can't set the IP address type for private APIs to only allow IPv4 addresses to invoke your private API. Only dualstack is supported. For more information, see [IP address types for REST APIs in API Gateway](./api-gateway-ip-address-type.html).
+
+  * To send traffic using your private API, you can use all IP address types supported by Amazon VPC. You can send dualstack and IPv6 traffic by configuring the settings on your VPC endpoint. You can't modify this using API Gateway. For more information, see [Add IPv6 support for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-migrate-ipv6-add.html).