AWS vpn documentation change

Service: vpn · 2025-07-04 · Documentation low

File: vpn/latest/s2svpn/VPC_VPN.md

Summary

Expanded IPv6 support documentation, including inner/outer tunnel IP versions, migration scenarios, and updated limitations

Security assessment

The updates clarify IPv6 capabilities and limitations but do not reference security fixes or vulnerabilities. The additions are functional documentation updates rather than security-related content.

Diff

diff --git a/vpn/latest/s2svpn/VPC_VPN.md b/vpn/latest/s2svpn/VPC_VPN.md
index 373947af3..dc91bc7e3 100644
--- a//vpn/latest/s2svpn/VPC_VPN.md
+++ b//vpn/latest/s2svpn/VPC_VPN.md
@@ -75 +75,11 @@ The following features are supported on AWS Site-to-Site VPN connections:
-  * Support for IPv6 traffic for VPN connections on a transit gateway
+  * Support for IPv6 support for AWS Site-to-Site VPN
+
+    * IPv6 for inner tunnel IP addresses (packet IP)
+
+    * IPv6 for outer tunnel IP addresses (tunnel IP) on Transit Gateway and Cloud WAN
+
+  * Full IPv6 migration support with the following combinations:
+
+    * IPv6 outer tunnel IP with IPv6 inner packet IP (IPv6-in-IPv6)
+
+    * IPv6 outer tunnel IP with IPv4 inner packet IP (IPv4-in-IPv6)
@@ -84 +94 @@ A Site-to-Site VPN connection has the following limitations.
-  * IPv6 traffic is not supported for VPN connections on a virtual private gateway.
+  * IPv6 traffic is not supported for VPN connections on a virtual private gateway. IPv6 for outer tunnel IPs is only supported on Transit Gateway and Cloud WAN.
@@ -87,0 +98,6 @@ A Site-to-Site VPN connection has the following limitations.
+  * A single Site-to-Site VPN connection cannot support both IPv4 and IPv6 traffic simultaneously. You need separate VPN connections to transport IPv4 and IPv6 packets.
+
+  * Private IP VPN connections do not support IPv6 addresses for outer tunnel IPs.
+
+  * You cannot modify an existing IPv4 VPN connection to use IPv6. You must delete the existing connection and create a new one.
+
@@ -128,0 +145,2 @@ When you create an accelerated VPN connection, we create and manage two accelera
+There are no additional charges for using IPv6 addresses with your Site-to-Site VPN VPN connections.
+