AWS directoryservice documentation change
Summary
Added documentation for AssessmentConfiguration structure including parameters for directory assessments, DNS/IP validation, instance IDs, VPC settings, and optional security group configuration
Security assessment
The change documents security-related configuration parameters (SecurityGroupIds, IP validation patterns) for directory assessments but does not indicate a specific security vulnerability being addressed. It provides guidance for secure network configuration of self-managed AD components.
Diff
diff --git a/directoryservice/latest/devguide/API_AssessmentConfiguration.md b/directoryservice/latest/devguide/API_AssessmentConfiguration.md index 8b1378917..0722e1527 100644 --- a//directoryservice/latest/devguide/API_AssessmentConfiguration.md +++ b//directoryservice/latest/devguide/API_AssessmentConfiguration.md @@ -0,0 +1 @@ +[](/pdfs/directoryservice/latest/devguide/directoryservice-api.pdf#API_AssessmentConfiguration "Open PDF") @@ -1,0 +3,103 @@ +[Documentation](/index.html)[AWS Directory Service](/directory-service/index.html)[API Reference](welcome.html) + +ContentsSee Also + +# AssessmentConfiguration + +Contains configuration parameters required to perform a directory assessment. + +## Contents + +**CustomerDnsIps** + + +A list of IP addresses for the DNS servers or domain controllers in your self-managed AD that are tested during the assessment. + +Type: Array of strings + +Array Members: Fixed number of 2 items. + +Pattern: `^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$` + +Required: Yes + +**DnsName** + + +The fully qualified domain name (FQDN) of the self-managed AD domain to assess. + +Type: String + +Pattern: `^([a-zA-Z0-9]+[\\.-])+([a-zA-Z0-9])+$` + +Required: Yes + +**InstanceIds** + + +The identifiers of the self-managed instances with SSM that are used to perform connectivity and validation tests. + +Type: Array of strings + +Array Members: Fixed number of 2 items. + +Pattern: `^(i-[0-9a-f]{8}|i-[0-9a-f]{17}|mi-[0-9a-f]{8}|mi-[0-9a-f]{17})$` + +Required: Yes + +**VpcSettings** + + +Contains VPC information for the [CreateDirectory](./API_CreateDirectory.html), [CreateMicrosoftAD](./API_CreateMicrosoftAD.html), or [CreateHybridAD](./API_CreateHybridAD.html) operation. + +Type: [DirectoryVpcSettings](./API_DirectoryVpcSettings.html) object + +Required: Yes + +**SecurityGroupIds** + + +By default, the service attaches a security group to allow network access to the self-managed nodes in your Amazon VPC. You can optionally supply your own security group that allows network traffic to and from your self-managed domain controllers outside of your Amazon VPC. + +Type: Array of strings + +Array Members: Fixed number of 1 item. + +Pattern: `^(sg-[0-9a-f]{8}|sg-[0-9a-f]{17})$` + +Required: No + +## See Also + +For more information about using this API in one of the language-specific AWS SDKs, see the following: + + * [AWS SDK for C++](https://docs.aws.amazon.com/goto/SdkForCpp/ds-2015-04-16/AssessmentConfiguration) + + * [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/ds-2015-04-16/AssessmentConfiguration) + + * [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/ds-2015-04-16/AssessmentConfiguration) + + + + + **Javascript is disabled or is unavailable in your browser.** + +To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. + +[Document Conventions](/general/latest/gr/docconventions.html) + +Assessment + +AssessmentReport + +Did this page help you? - Yes + +Thanks for letting us know we're doing a good job! + +If you've got a moment, please tell us what we did right so we can do more of it. + +Did this page help you? - No + +Thanks for letting us know this page needs work. We're sorry we let you down. + +If you've got a moment, please tell us how we can make the documentation better.