AWS network-manager documentation change
Summary
Updated VPC attachment creation steps to include options for appliance mode, IPv6, DNS support, and security group referencing (enabled by default).
Security assessment
The changes add documentation for security group referencing configuration during VPC attachment creation. While this relates to security features, there is no evidence of a patched vulnerability or security incident being addressed.
Diff
diff --git a/network-manager/latest/cloudwan/cloudwan-vpc-share-create.md b/network-manager/latest/cloudwan/cloudwan-vpc-share-create.md index 44eec907a..22f6b72a2 100644 --- a//network-manager/latest/cloudwan/cloudwan-vpc-share-create.md +++ b//network-manager/latest/cloudwan/cloudwan-vpc-share-create.md @@ -29 +29,9 @@ Use the AWS Network Manager console to create a shared VPC attachment that can b - 10. In the **VPC attachment** section, choose **IPv6 support** if you want to enable IPv6 for the attachment. + 10. Optionally choose any of the following: + + * Choose **Appliance mode support** if appliance mode is supported. For more information about appliance mode, see [Appliance mode](./cloudwan-vpc-attachment.html#cloudwan-appliancemode). + + * Choose **IPv6 support** if the attachment supports IPv6. + + * By default, **DNS support** is enabled. This allows domain name system resolution for the attachment. Clear the check box if you don't want to enable DNS support. For more information, see [DNS support](./cloudwan-vpc-attachment.html#cloudwan-dns-support). + + * By default **Security Group Referencing support** is enabled. When you create a VPC attachment, Cloud WAN automatically enables security group referencing for VPCs attached to the same core network edge. This allows you to reference security groups across VPCs in your security group rules. Clear the check box if you don't want to enable security group referencing. For more information, see [Security group referencing](./cloudwan-vpc-attachment.html#cloudwan-sg-referencing).