AWS efs documentation change
Summary
Updated documentation links and section titles related to VPC endpoints and security groups. Changed references from general VPC guides to more specific PrivateLink documentation pages. Removed redundant policy reference link. Renamed 'Security considerations' section to 'Using VPC security groups'.
Security assessment
The changes primarily update documentation links and refine section titles. The rename to 'Using VPC security groups' emphasizes security group configuration for network access control, which is a security best practice. However, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/efs/latest/ug/efs-vpc-endpoints.md b/efs/latest/ug/efs-vpc-endpoints.md index 36f3ce00c..922648853 100644 --- a//efs/latest/ug/efs-vpc-endpoints.md +++ b//efs/latest/ug/efs-vpc-endpoints.md @@ -9 +9 @@ Creating an interface endpointCreating an endpoint policy -To establish a private connection between your virtual private cloud (VPC) and the Amazon EFS API, you can create an interface VPC endpoint. The endpoint provides secure connectivity to the Amazon EFS API without requiring an internet gateway, NAT instance, or virtual private network (VPN) connection. For more information, see [Interface VPC Endpoints](https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html) in the _Amazon VPC User Guide_. +To establish a private connection between your virtual private cloud (VPC) and the Amazon EFS API, you can create an interface VPC endpoint. The endpoint provides secure connectivity to the Amazon EFS API without requiring an internet gateway, NAT instance, or virtual private network (VPN) connection. For more information, see [Access an AWS service using an interface VPC endpoint](https://docs.aws.amazon.com/vpc/latest/privatelink/create-interface-endpoint.html) in the _Amazon VPC User Guide_. @@ -11 +11 @@ To establish a private connection between your virtual private cloud (VPC) and t -Interface VPC endpoints are powered by AWS PrivateLink, a feature that enables private communication between AWS services using private IP addresses. To use AWS PrivateLink, create an interface VPC endpoint for Amazon EFS in your VPC using the Amazon VPC console, API, or CLI. Doing this creates an elastic network interface in your subnet with a private IP address that serves Amazon EFS API requests. You can also access a VPC endpoint from on-premises environments or from other VPCs using AWS VPN, AWS Direct Connect, or VPC peering. To learn more, see [Accessing Services Through AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html#what-is-privatelink) in the _Amazon VPC User Guide_. +Interface VPC endpoints are powered by AWS PrivateLink, a feature that enables private communication between AWS services using private IP addresses. To use AWS PrivateLink, create an interface VPC endpoint for Amazon EFS in your VPC using the Amazon VPC console, API, or CLI. Doing this creates an elastic network interface in your subnet with a private IP address that serves Amazon EFS API requests. You can also access a VPC endpoint from on-premises environments or from other VPCs using AWS VPN, AWS Direct Connect, or VPC peering. To learn more, see [Connect your VPC to services using AWS PrivateLink](vpc/latest/userguide/endpoint-services-overview.html) in the _Amazon VPC User Guide_. @@ -24 +24 @@ To create an interface VPC endpoint for Amazon EFS, use one of the following: -For a complete list of Amazon EFS endpoints, see [Amazon Elastic File System](https://docs.aws.amazon.com/general/latest/gr/rande.html#elasticfilesystem-region) in the _Amazon Web Services General Reference_. +For a complete list of Amazon EFS endpoints, see [Amazon Elastic File System endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/elasticfilesystem.html) in the _Amazon Web Services General Reference_. @@ -26 +26 @@ For a complete list of Amazon EFS endpoints, see [Amazon Elastic File System](ht -For more information about how to create an interface endpoint, see [Creating an interface endpoint](https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html#create-interface-endpoint) in the _Amazon VPC User Guide_. +For more information about how to create an interface endpoint, see [Access an AWS service using an interface VPC endpoint](https://docs.aws.amazon.com/vpc/latest/privatelink/create-interface-endpoint.html) in the _Amazon VPC User Guide_. @@ -41 +41 @@ To control access to the Amazon EFS API, you can attach an AWS Identity and Acce -For more information, see [Controlling Access to Services with VPC Endpoints](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-access.html) in the _Amazon VPC User Guide_. +For more information, see see [Control access to VPC endpoints using endpoint policies](https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-access.html) in the _Amazon VPC User Guide_. @@ -63,2 +62,0 @@ The following example shows a VPC endpoint policy that denies everyone permissio -For more information, see [Using VPC Endpoint Policies](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-access.html#vpc-endpoint-policies) in the _Amazon VPC User Guide_. - @@ -71 +69 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Security considerations for network access +Using VPC security groups