AWS AWSEC2 medium security documentation change
Summary
Removed statement about security group VPC scope restriction
Security assessment
The removal of the line 'A security group can be used only in the VPC for which it is created' could lead to misunderstandings about security group boundaries, which are critical for network security. This omission might imply broader permissions unless clarified elsewhere, creating a potential misconfiguration risk.
Diff
diff --git a/AWSEC2/latest/UserGuide/ec2-security-groups.md b/AWSEC2/latest/UserGuide/ec2-security-groups.md index 806a8226c..3f580db58 100644 --- a//AWSEC2/latest/UserGuide/ec2-security-groups.md +++ b//AWSEC2/latest/UserGuide/ec2-security-groups.md @@ -36 +36 @@ There is no additional charge for using security groups. -A security group can be used only in the VPC for which it is created. You can associate each instance with multiple security groups, and you can associate each security group with multiple instances. You add rules to each security group that allow traffic to or from its associated instances. You can modify the rules for a security group at any time. New and modified rules are automatically applied to all instances that are associated with the security group. When Amazon EC2 decides whether to allow traffic to reach an instance, it evaluates all rules from all security groups that are associated with the instance. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) in the _Amazon VPC User Guide_. +You can associate each instance with multiple security groups, and you can associate each security group with multiple instances. You add rules to each security group that allow traffic to or from its associated instances. You can modify the rules for a security group at any time. New and modified rules are automatically applied to all instances that are associated with the security group. When Amazon EC2 decides whether to allow traffic to reach an instance, it evaluates all rules from all security groups that are associated with the instance. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html) in the _Amazon VPC User Guide_.