AWS AWSCloudFormation documentation change
Summary
Added warning about temporary traffic interruption during rule modifications
Security assessment
Documents security-related operational behavior but does not address a vulnerability
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.md b/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.md index 06cec1bcb..06a9052ad 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.md +++ b//AWSCloudFormation/latest/UserGuide/aws-resource-ec2-securitygroup.md @@ -12,0 +13,2 @@ If you do not specify an egress rule, we add egress rules that allow outbound IP +If you modify a rule, CloudFormation removes the existing rule and then adds a new rule. There is a brief period when neither the original rule or the new rule exists, so the corresponding traffic is dropped. + @@ -90 +92 @@ _Required_ : No -The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group. +The outbound rules associated with the security group. @@ -101 +103 @@ _Required_ : No -The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group. +The inbound rules associated with the security group.