AWS network-firewall documentation change
Summary
Refined flow capture operation steps to include scoping options for primary firewall endpoints, VPC endpoint associations, and combined operations.
Security assessment
The changes improve operational clarity for flow capture configuration but do not address security risks or introduce security-related functionality. No evidence of security vulnerability mitigation.
Diff
diff --git a/network-firewall/latest/developerguide/flow-operations-capture.md b/network-firewall/latest/developerguide/flow-operations-capture.md index 94ea57500..3cc804a3d 100644 --- a//network-firewall/latest/developerguide/flow-operations-capture.md +++ b//network-firewall/latest/developerguide/flow-operations-capture.md @@ -25 +25 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 5. Configure the flow filters to determine the scope of the operation: + 5. Configure the scope of the flow operation, depending on your firewall configuration: @@ -27 +27 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 1. Define an Availability Zone and ARN for the operation. + * To perform the operation in the primary firewall endpoint only, define the VpcEndpointId. @@ -29 +29,5 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 2. Optionally, define additional filters: + * To perform the operation in a VPC endpoint association only, define the VPC endpoint association ARN. + + * To perform the operation in the primary firewall endpoint and all associated VPC endpoints, define the Availability Zone of the primary firewall endpoint. + + 6. Optionally, configure additional flow filters to further customize the scope of the operation: @@ -39 +43 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 6. Review your configured filters in the **Filters** section. + 7. Review your configured filters in the **Filters** section. @@ -41 +45 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 7. Choose **Start capture** , then confirm that you want to begin the operation. + 8. Choose **Start capture** , then confirm that you want to begin the operation. @@ -43 +47 @@ When using flow capture operations with broad filter criteria (like wide IP rang - 8. Return to the **Details** page to monitor the operation status. + 9. Return to the **Details** page to monitor the operation status.