AWS serverless-application-model documentation change
Summary
Added VpcEndpointDomainName and VpcEndpointHostedZoneId properties for private domain DNS configuration
Security assessment
Documents secure network configuration options for private API endpoints without addressing specific security issues
Diff
diff --git a/serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md b/serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md index 432c21b3c..a964af334 100644 --- a//serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md +++ b//serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md @@ -24,0 +25,2 @@ To declare this entity in your AWS Serverless Application Model (AWS SAM) templa + VpcEndpointDomainName: String + VpcEndpointHostedZoneId: String @@ -131,0 +134,22 @@ _AWS CloudFormation compatibility_ : This property is passed directly to the `[ +`VpcEndpointDomainName` + + +A DNS name of the VPC interface endpoint associated with the API Gateway VPC service. This property is required only for private domains. + +_Type_ : String + +_Required_ : No + +_AWS CloudFormation compatibility_ : This property is passed directly to the `[DNSName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordset-aliastarget.html)` property of an `AWS::Route53::RecordSet` `AliasTarget` field. + +`VpcEndpointHostedZoneId` + + +The hosted zone ID of the VPC interface endpoint associated with the API Gateway VPC service. This property is required only for private domains. + +_Type_ : String + +_Required_ : No + +_AWS CloudFormation compatibility_ : This property is passed directly to the `[HostedZoneId](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordset-aliastarget.html)` property of an `AWS::Route53::RecordSet` `AliasTarget` field. + @@ -159 +183 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -DomainConfiguration +DomainAccessAssociation