AWS serverless-application-model documentation change

Service: serverless-application-model · 2025-05-22 · Documentation low

File: serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md

Summary

Added VpcEndpointDomainName and VpcEndpointHostedZoneId properties for private domain Route53 configuration

Security assessment

New properties support secure VPC-bound API configurations by enabling DNS routing for private endpoints. This documents security-related infrastructure but doesn't indicate a security fix.

Diff

diff --git a/serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md b/serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md
index 432c21b3c..a964af334 100644
--- a//serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md
+++ b//serverless-application-model/latest/developerguide/sam-property-api-route53configuration.md
@@ -24,0 +25,2 @@ To declare this entity in your AWS Serverless Application Model (AWS SAM) templa
+      VpcEndpointDomainName: String
+      VpcEndpointHostedZoneId: String
@@ -131,0 +134,22 @@ _AWS CloudFormation compatibility_ : This property is passed directly to the `[
+`VpcEndpointDomainName`
+    
+
+A DNS name of the VPC interface endpoint associated with the API Gateway VPC service. This property is required only for private domains.
+
+_Type_ : String
+
+_Required_ : No
+
+_AWS CloudFormation compatibility_ : This property is passed directly to the `[DNSName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordset-aliastarget.html)` property of an `AWS::Route53::RecordSet` `AliasTarget` field.
+
+`VpcEndpointHostedZoneId`
+    
+
+The hosted zone ID of the VPC interface endpoint associated with the API Gateway VPC service. This property is required only for private domains.
+
+_Type_ : String
+
+_Required_ : No
+
+_AWS CloudFormation compatibility_ : This property is passed directly to the `[HostedZoneId](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-recordset-aliastarget.html)` property of an `AWS::Route53::RecordSet` `AliasTarget` field.
+
@@ -159 +183 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-DomainConfiguration
+DomainAccessAssociation