AWS amazon-mq documentation change
Summary
Restructured endpoint documentation, added broker endpoints, and updated CLI examples for dual-stack support
Security assessment
While dual-stack support and endpoint configuration relate to network security, the changes appear to be feature documentation updates rather than addressing specific vulnerabilities
Diff
diff --git a/amazon-mq/latest/developer-guide/connect-to-amazonmq.md b/amazon-mq/latest/developer-guide/connect-to-amazonmq.md index 3796bf891..6b538f22c 100644 --- a//amazon-mq/latest/developer-guide/connect-to-amazonmq.md +++ b//amazon-mq/latest/developer-guide/connect-to-amazonmq.md @@ -5 +5 @@ -Connect to Amazon MQ using Dual-stack (IPv4 and IPv6) endpointsConnect to Amazon MQ using AWS PrivateLink +Service endpointsBroker endpointsConnect to Amazon MQ using Dual-stack (IPv4 and IPv6) endpointsConnect to Amazon MQ using AWS PrivateLink @@ -9,13 +9 @@ Connect to Amazon MQ using Dual-stack (IPv4 and IPv6) endpointsConnect to Amazon -You can connect to Amazon MQ from multiple sources such as other AWS services using service endpoints. Amazon MQ supports the following connection methods: - - * IPv4 only - - * IPv6 only - - * Dual-stack (IPv4 and IPv6) - - * [FIPS](https://aws.amazon.com/compliance/fips/) - - * [AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html) - - +You can connect to Amazon MQ from other AWS services using service endpoints and broker endpoints. @@ -22,0 +11 @@ You can connect to Amazon MQ from multiple sources such as other AWS services us +## Service endpoints @@ -26 +15 @@ The following connection methods are used for the **Amazon MQ service API:** -Connection method | Domains +Domains | Connection method @@ -28,4 +17,6 @@ Connection method | Domains -IPv4 | `mq.`region`.amazonaws.com` -Dual-stack (IPv4 and IPv6) | `mq.`region`.api.aws` -FIPS with IPv4 only | `mq-fips.`region`.amazonaws.com` -FIPS with Dual-stack | `mq-fips.`region`.api.aws` +`mq.`region`.amazonaws.com` | IPv4 +`mq.`region`.api.aws` | Dual-stack (IPv4 and IPv6) +`mq-fips.`region`.amazonaws.com` | FIPS with IPv4 only +`mq-fips.`region`.api.aws` | FIPS with Dual-stack + +## Broker endpoints @@ -35 +26 @@ The following connection methods are used for **Amazon MQ brokers:** -Connection method | Domains +Domains | Connection method @@ -37 +28,6 @@ Connection method | Domains -IPv4 | ``brokerId`.mq.`region`.amazonaws.com` +``brokerId`.mq.`region`.amazonaws.com` | IPv4 +``brokerId`.mq.`region`.on.aws` | Dual-stack (IPv4 and IPv6) + +###### Note + +Amazon MQ for ActiveMQ brokers do not support dual-stack. @@ -41 +37 @@ IPv4 | ``brokerId`.mq.`region`.amazonaws.com` -Dual-stack endpoints support both IPv4 and IPv6 traffic. When you make a request to a dual-stack endpoint, the endpoint URL resolves to an IPv4 or an IPv6 address. You can turn on access to dual-stack endpoints using the SDK, a configuration file, or an environment variable. For more information on dual-stack and FIPS endpoints, see the [SDK Reference guide](https://docs.aws.amazon.com/sdkref/latest/guide/feature-endpoints.html). +Dual-stack endpoints support both IPv4 and IPv6 traffic. When you make a request to a dual-stack endpoint, the endpoint URL resolves to an IPv4 or an IPv6 address. For more information on dual-stack and FIPS endpoints, see the [SDK Reference guide](https://docs.aws.amazon.com/sdkref/latest/guide/feature-endpoints.html). @@ -53 +49 @@ For the full list of Amazon MQ endpoints, see the [AWS General Reference](https: -Support for PrivateLink is only available for the Amazon MQ API endpoint, not the broker endpoint. For more information on privately connecting to a broker endpoint, see [Accessing the Amazon MQ broker web console without public accessibility](./accessing-web-console-of-broker-without-public-accessibility.html). +Support for PrivateLink is only available for the Amazon MQ API endpoint, not the broker endpoint. For more information on privately connecting to a broker endpoint, see [Configuring a private Amazon MQ broker](./configuring-private-broker.html). @@ -66 +62 @@ The following CLI example shows how to call the `describe-broker-engine-type` in - aws mq describe-broker-engine-types --endpoint-url https://mq.ap-southeast-2.api.aws --region ap-southeast-2 + AWS_USE_DUALSTACK=true aws mq describe-broker-engine-types --region ap-southeast-2