AWS AWSCloudFormation documentation change
Summary
Added INBOUND_DELEGATION direction and protocol restrictions for delegation endpoints
Security assessment
The change adds operational configuration details (Do53 protocol usage) but does not introduce security features or address vulnerabilities. Do53 is standard DNS without encryption, so no security enhancement is documented.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.md index 531643e87..6b7ef757d 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-route53resolver-resolverendpoint.md @@ -80,0 +81,2 @@ Indicates whether the Resolver endpoint allows inbound or outbound DNS queries: + * `INBOUND_DELEGATION`: Resolver delegates queries to Route 53 private hosted zones from your network. + @@ -88 +90 @@ _Required_ : Yes - _Allowed values_ : `INBOUND | OUTBOUND` + _Allowed values_ : `INBOUND | OUTBOUND | INBOUND_DELEGATION` @@ -161 +163 @@ _Required_ : No -Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only. +Protocols used for the endpoint. DoH-FIPS is applicable for a default inbound endpoints only. @@ -179,0 +182,2 @@ For an inbound endpoint you can apply the protocols as follows: +For a delegation inbound endpoint you can use Do53 only. +