AWS network-manager medium security documentation change
Summary
Added documentation about default DNS support and Security Group Referencing enablement during VPC attachment creation. Reordered steps and added new step numbers.
Security assessment
The change explicitly documents that Security Group Referencing is enabled by default, which allows cross-VPC security group rule references. This directly relates to security configuration management and impacts how network security policies are enforced across attached VPCs. The documentation update provides critical information about a security-relevant feature (security group rule management) that could lead to unintended access if misconfigured.
Diff
diff --git a/network-manager/latest/cloudwan/cloudwan-vpc-attachment-add.md b/network-manager/latest/cloudwan/cloudwan-vpc-attachment-add.md index ba52359d4..828ebd4fb 100644 --- a//network-manager/latest/cloudwan/cloudwan-vpc-attachment-add.md +++ b//network-manager/latest/cloudwan/cloudwan-vpc-attachment-add.md @@ -35 +35 @@ The following steps create a VPC attachment for a core network using the console - 11. From the **VPC IP** dropdown list, choose the VPC ID to attach to the core network. + 11. By default, **DNS support** is enabled. This allows domain name system resolution for the attachment. Clear the check box if you don't want to enable DNS support. For more information, see [DNS support](./cloudwan-vpc-attachment.html#cloudwan-dns-support). @@ -37 +37 @@ The following steps create a VPC attachment for a core network using the console - 12. After choosing the VPC ID, you're prompted to choose the **Availability Zone** and **Subnet Id** in which to create the core network VPC attachment. The Availability Zones that are listed are those edge locations that you chose when you created your core network. You must choose at least one Availability Zone and subnet ID. + 12. By default **Security Group Referencing support** is enabled. When you create a VPC attachment, Cloud WAN automatically enables security group referencing for VPCs attached to the same core network edge. This allows you to reference security groups across VPCs in your security group rules. Clear the check box if you don't want to enable security group referencing. For more information, see [Security group referencing](./cloudwan-vpc-attachment.html#cloudwan-sg-referencing). @@ -39 +39 @@ The following steps create a VPC attachment for a core network using the console - 13. (Optional) In the **Tags** section, add **Key** and **Value** pairs to further help identify this resource. You can add multiple tags by choosing **Add tag** , or remove any tag by choosing **Remove tag**. + 13. From the **VPC IP** dropdown list, choose the VPC ID to attach to the core network. @@ -41 +41,5 @@ The following steps create a VPC attachment for a core network using the console - 14. Choose **Create attachment**. + 14. After choosing the VPC ID, you're prompted to choose the **Availability Zone** and **Subnet Id** in which to create the core network VPC attachment. The Availability Zones that are listed are those edge locations that you chose when you created your core network. You must choose at least one Availability Zone and subnet ID. + + 15. (Optional) In the **Tags** section, add **Key** and **Value** pairs to further help identify this resource. You can add multiple tags by choosing **Add tag** , or remove any tag by choosing **Remove tag**. + + 16. Choose **Create attachment**.