AWS network-firewall documentation change
Summary
Updated subnet configuration documentation to clarify primary public subnets usage and added information about VPC endpoint associations
Security assessment
The changes clarify subnet selection and firewall endpoint deployment but do not address specific vulnerabilities or security controls. Mentions of VPC endpoint associations are operational rather than security-focused.
Diff
diff --git a/network-firewall/latest/developerguide/firewall-settings.md b/network-firewall/latest/developerguide/firewall-settings.md index 23743633b..cfffa7df5 100644 --- a//network-firewall/latest/developerguide/firewall-settings.md +++ b//network-firewall/latest/developerguide/firewall-settings.md @@ -15 +15,5 @@ A firewall in Network Firewall has the following configuration settings, which y - * **Subnets** – The subnets to use for your firewall endpoints. You can specify up to one subnet for each Availability Zone that your VPC spans. See [Configuring your VPC and other components for AWS Network Firewall](./vpc-config.html). + * **Subnets** – The primary public subnets that Network Firewall should use for the firewall. Network Firewall creates a firewall endpoint in each subnet. Specify one subnet for each Availability Zone where you want to use the firewall. Each subnet establishes the availability of the firewall in its Availability Zone. + +In addition to these subnets, you can define other endpoints for the firewall in VPC endpoint associations. For more information, about firewall endpoints, see [Firewalls and firewall endpoints in AWS Network Firewall](./firewalls.html) + +For information about using your configured subnets, see [Configuring your VPC and other components for AWS Network Firewall](./vpc-config.html). @@ -38 +42 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Firewalls +Considerations @@ -40 +44 @@ Firewalls -Managing your firewall +Firewall and VPC endpoint association owner capabilities