AWS vpc documentation change
Summary
Consolidated CLI documentation focusing on AWS CLI, removed PowerShell references, added CIDR canonicalization note, merged route propagation enable/disable sections, simplified console steps.
Security assessment
Changes focus on improving CLI documentation clarity and structure. No security vulnerabilities addressed. CIDR canonicalization note explains expected behavior but doesn't introduce security controls.
Diff
diff --git a/vpc/latest/userguide/WorkWithRouteTables.md b/vpc/latest/userguide/WorkWithRouteTables.md index 82e465079..f32b02014 100644 --- a//vpc/latest/userguide/WorkWithRouteTables.md +++ b//vpc/latest/userguide/WorkWithRouteTables.md @@ -77,7 +77 @@ Subnets that aren't explicitly associated with any route table have an implicit -###### To describe one or more route tables and view its associations using the command line - - * [describe-route-tables](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-route-tables.html) (AWS CLI) - - * [Get-EC2RouteTable](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2RouteTable.html) (AWS Tools for Windows PowerShell) - - +###### To describe one or more route tables and view its associations using the AWS CLI @@ -84,0 +79 @@ Subnets that aren't explicitly associated with any route table have an implicit +Use the [describe-route-tables](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-route-tables.html) command. @@ -104 +99 @@ There is a quota on the number of routes that you can add per route table. For m - 4. To add a route, choose **Add route**. For **Destination** enter the destination CIDR block, a single IP address, or the ID of a prefix list. + 4. To add a route, choose **Add route**. For **Destination** enter an IP address range, a single IP address, or the ID of a prefix list. For **Target** , select the resource type and then enter the ID of the resource. @@ -106 +101 @@ There is a quota on the number of routes that you can add per route table. For m - 5. To modify a route, for **Destination** , replace the destination CIDR block or single IP address. For **Target** , choose a target. + 5. To modify a route, enter the new destination CIDR block or prefix list ID and choose a target. @@ -115,9 +110 @@ There is a quota on the number of routes that you can add per route table. For m -###### To update the routes for a route table using the command line - - * [create-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-route.html) (AWS CLI) - - * [replace-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/replace-route.html) (AWS CLI) - - * [delete-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/delete-route.html) (AWS CLI) - - * [New-EC2Route](https://docs.aws.amazon.com/powershell/latest/reference/items/New-EC2Route.html) (AWS Tools for Windows PowerShell) +###### To update the routes for a route table using the AWS CLI @@ -125 +112 @@ There is a quota on the number of routes that you can add per route table. For m - * [Set-EC2Route](https://docs.aws.amazon.com/powershell/latest/reference/items/Set-EC2Route.html) (AWS Tools for Windows PowerShell) +If you add a route using a command line tool or the API, the destination CIDR block is automatically modified to its canonical form. For example, if you specify `100.68.0.18/18` for the CIDR block, we create a route with a destination CIDR block of `100.68.0.0/18`. @@ -127 +114 @@ There is a quota on the number of routes that you can add per route table. For m - * [Remove-EC2Route](https://docs.aws.amazon.com/powershell/latest/reference/items/Remove-EC2Route.html) (AWS Tools for Windows PowerShell) + * [create-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-route.html) @@ -128,0 +116 @@ There is a quota on the number of routes that you can add per route table. For m + * [replace-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/replace-route.html) @@ -129,0 +118 @@ There is a quota on the number of routes that you can add per route table. For m + * [delete-route](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/delete-route.html) @@ -132 +120,0 @@ There is a quota on the number of routes that you can add per route table. For m -###### Note @@ -134 +121,0 @@ There is a quota on the number of routes that you can add per route table. For m -If you add a route using a command line tool or the API, the destination CIDR block is automatically modified to its canonical form. For example, if you specify `100.68.0.18/18` for the CIDR block, we create a route with a destination CIDR block of `100.68.0.0/18`. @@ -144 +131 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am -###### To enable route propagation using the console +###### To enable or disable route propagation using the console @@ -152,8 +139 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am - 4. Select the **Enable** check box next to the virtual private gateway, and then choose **Save**. - - - - -###### To enable route propagation using the command line - - * [enable-vgw-route-propagation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/enable-vgw-route-propagation.html) (AWS CLI) + 4. Select or clear the **Enable** check box next to the virtual private gateway. @@ -161,14 +141 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am - * [Enable-EC2VgwRoutePropagation](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-EC2VgwRoutePropagation.html) (AWS Tools for Windows PowerShell) - - - - -###### To disable route propagation using the console - - 1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/). - - 2. In the navigation pane, choose **Route tables** , and then select the route table. - - 3. Choose **Actions** , **Edit route propagation**. - - 4. Clear the **Enable** check box next to the virtual private gateway, and then choose **Save**. + 5. Choose **Save**. @@ -179 +146 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am -###### To disable route propagation using the command line +###### To enable or disable route propagation using the AWS CLI @@ -181 +148 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am - * [disable-vgw-route-propagation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/disable-vgw-route-propagation.html) (AWS CLI) + * [enable-vgw-route-propagation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/enable-vgw-route-propagation.html) @@ -183 +150 @@ For more information, see [Site-to-Site VPN routing options](https://docs.aws.am - * [Disable-EC2VgwRoutePropagation](https://docs.aws.amazon.com/powershell/latest/reference/items/Disable-EC2VgwRoutePropagation.html) (AWS Tools for Windows PowerShell) + * [disable-vgw-route-propagation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/disable-vgw-route-propagation.html) @@ -209,7 +176 @@ When you change the route table, your existing connections in the subnet are dro -###### To change the route table associated with a subnet using the command line - - * [replace-route-table-association](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/replace-route-table-association.html) (AWS CLI) - - * [Set-EC2RouteTableAssociation](https://docs.aws.amazon.com/powershell/latest/reference/items/Set-EC2RouteTableAssociation.html) (AWS Tools for Windows PowerShell) - - +###### To change the route table associated with a subnet using the AWS CLI @@ -216,0 +178 @@ When you change the route table, your existing connections in the subnet are dro +Use the [replace-route-table-association](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/replace-route-table-association.html) command.