AWS prescriptive-guidance documentation change
Summary
Increased virtual private gateway association limit from 10 to 20 per Direct Connect gateway
Security assessment
Change increases service quota without any security context or vulnerability mitigation mentioned.
Diff
diff --git a/prescriptive-guidance/latest/designing-control-tower-landing-zone/private-vif.md b/prescriptive-guidance/latest/designing-control-tower-landing-zone/private-vif.md index c6ca1d38f..12dfd2453 100644 --- a//prescriptive-guidance/latest/designing-control-tower-landing-zone/private-vif.md +++ b//prescriptive-guidance/latest/designing-control-tower-landing-zone/private-vif.md @@ -11 +11 @@ The following diagram shows how you can connect VPCs and on-premises environment -Most large enterprise customers deploy resources within a large number of VPCs across multiple AWS Regions and require connectivity from data centers that are spread across geographies. By using an AWS Direct Connect gateway, which is a global construct, you can use existing AWS Direct Connect connections to connect to resources in VPCs across AWS Regions. You can associate up to 10 virtual private gateways (each attached to a VPC) in different AWS Regions, directly to an AWS Direct Connect gateway. Alternatively, you can create a transit VIF and attach a total of six transit gateways (each attached to thousands of VPCs) to an AWS Direct Connect gateway across AWS Regions. +Most large enterprise customers deploy resources within a large number of VPCs across multiple AWS Regions and require connectivity from data centers that are spread across geographies. By using an AWS Direct Connect gateway, which is a global construct, you can use existing AWS Direct Connect connections to connect to resources in VPCs across AWS Regions. You can associate up to 20 virtual private gateways (each attached to a VPC) in different AWS Regions, directly to an AWS Direct Connect gateway. Alternatively, you can create a transit VIF and attach a total of six transit gateways (each attached to thousands of VPCs) to an AWS Direct Connect gateway across AWS Regions.