AWS govcloud-us medium security documentation change
Summary
Removed VPC launch requirements for EC2/RDS/EMR, updated traffic mirroring wording, and simplified metadata descriptions
Security assessment
Removing the requirement to launch resources in a VPC impacts network security controls. However, no explicit security vulnerability is addressed.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-vpc.md b/govcloud-us/latest/UserGuide/govcloud-vpc.md index 7ac52274c..d2ee2946e 100644 --- a//govcloud-us/latest/UserGuide/govcloud-vpc.md +++ b//govcloud-us/latest/UserGuide/govcloud-vpc.md @@ -17,2 +16,0 @@ Not all Amazon VPC endpoints in AWS GovCloud (US) support Amazon VPC endpoint po - * You must launch Amazon EC2 instances, Amazon RDS instances, or Amazon EMR instances in an Amazon VPC. In some cases, your account might have a default VPC. For more information, see [Determining if your account has a default VPC](AWSGovCloudDocs/govcloud-us/latest/UserGuide/govcloud-ec2.html#govcloud-ec2-vpc). - @@ -21 +19 @@ Not all Amazon VPC endpoints in AWS GovCloud (US) support Amazon VPC endpoint po - * Traffic mirror sessions are visible to the owner of a traffic mirror target only if created using the same account. If a traffic mirror target is shared with other accounts, those other accounts may still create sessions with that target, but those sessions will not be visible to the target owner. + * Traffic mirror sessions are visible to the owner of a traffic mirror target only if created using the same account. If a traffic mirror target is shared with other accounts, those other accounts can still create sessions with that target, but those sessions are not visible to the target owner. @@ -25,2 +22,0 @@ Not all Amazon VPC endpoints in AWS GovCloud (US) support Amazon VPC endpoint po - * You can't visualize your global network in geographic map view in Transit Gateway Network Manager console. - @@ -40 +36 @@ Not all Amazon VPC endpoints in AWS GovCloud (US) support Amazon VPC endpoint po -[Amazon VPC documentation](http://aws.amazon.com/documentation/vpc/). +[Amazon VPC documentation](https://docs.aws.amazon.com/vpc/) @@ -48 +44 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Name and Description of [Security Groups](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) and [Security Group Rules](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#SecurityGroupRules). + * Names and descriptions of security groups and security group rules @@ -50 +46 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Key and Value of [DHCP option sets ](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html) created in your VPC. + * Keys and values of DHCP option sets @@ -52 +48 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Client Token values used for [Idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html#client-tokens) of your API calls. + * Names of destination log groups for VPC Flow Logs @@ -54 +50 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Destination log group name of [VPC Flow Logs](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). + * Tag keys and values @@ -56 +52 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Service name of a [VPC Endpoint](https://docs.aws.amazon.com/vpc/latest/privatelink/create-endpoint-service.html). + * Service names of VPC endpoints @@ -58 +54 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * Key and Value of [Tags](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html) associated with your resources. + * Client token values used for the idempotency of API requests