AWS elasticloadbalancing documentation change
Summary
Updated security group guidance, added cross-reference to target security groups documentation, and streamlined VPC selection instructions. Added CloudFormation listener examples.
Security assessment
While the changes improve security documentation by clarifying security group requirements and adding references, there is no evidence of addressing a specific security vulnerability. The updates primarily enhance existing security guidance rather than patching a flaw.
Diff
diff --git a/elasticloadbalancing/latest/network/create-network-load-balancer.md b/elasticloadbalancing/latest/network/create-network-load-balancer.md index 675be3649..7960c0137 100644 --- a//elasticloadbalancing/latest/network/create-network-load-balancer.md +++ b//elasticloadbalancing/latest/network/create-network-load-balancer.md @@ -28 +28 @@ A Network Load Balancer takes requests from clients and distributes them across - * Ensure that the security groups for target instances allow traffic on the listener port from client IP addresses (if targets are specified by instance ID) or load balancer nodes (if targets are specified by IP address). + * Ensure that the security groups for target instances allow traffic on the listener port from client IP addresses (if targets are specified by instance ID) or load balancer nodes (if targets are specified by IP address). For more information, see [Target security groups](./target-group-register-targets.html#target-security-groups). @@ -62,3 +62 @@ Console - 1. For **VPC** , select a VPC. - -With an internet-facing load balancer, only VPCs with an internet gateway are available for selection. + 1. For **VPC** , select the VPC that you prepared for your load balancer. With an internet-facing load balancer, only VPCs with an internet gateway are available for selection. @@ -99,0 +98,2 @@ If you don't associate any security groups with your Network Load Balancer now, +This section appears only if you add a TLS listener. + @@ -124 +124 @@ Use the [create-load-balancer](https://docs.aws.amazon.com/cli/latest/reference/ -The following example creates an internet-facing load balancer with two enabled Availability Zones. +The following example creates an internet-facing load balancer with two enabled Availability Zones and a security group. @@ -157 +157 @@ Include the `--ip-address-type` option as shown in the following example. -###### To add listeners +###### To add a listener @@ -159 +159 @@ Include the `--ip-address-type` option as shown in the following example. -Use the [create-listener](https://docs.aws.amazon.com/cli/latest/reference/elbv2/create-listener.html) command. For examples, see [Add a listener](./create-listener.html#add-listener). +Use the [create-listener](https://docs.aws.amazon.com/cli/latest/reference/elbv2/create-listener.html) command. For examples, see [Create a listener](./create-listener.html). @@ -185,0 +186,4 @@ Define a resource of type [AWS::ElasticLoadBalancingV2::LoadBalancer](https://do +###### To add a listener + +Define a resource of type [AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html). For examples, see [Create a listener](./create-listener.html). +