AWS Security ChangesHomeSearch

AWS apprunner documentation change

Service: apprunner · 2025-08-28 · Documentation low

File: apprunner/latest/dg/network-incoming.md

Summary

Updated Private Endpoint documentation to state support for dual-stack (IPv4/IPv6) address types and removed note about IPv4-only limitation for Private Endpoints.

Security assessment

The change adds support for dual-stack IP addresses in Private Endpoints but does not address a specific security vulnerability. It removes outdated limitations without introducing security-specific guidance.

Diff

diff --git a/apprunner/latest/dg/network-incoming.md b/apprunner/latest/dg/network-incoming.md
index 294b26c8c..d0aa1db85 100644
--- a//apprunner/latest/dg/network-incoming.md
+++ b//apprunner/latest/dg/network-incoming.md
@@ -11 +11 @@ You can configure your service to receive incoming traffic from private or publi
-A **Public Endpoint** is the default configuration. It opens your service to any incoming traffic from the public internet. It also provides you with the flexibility to choose between Internet Protocol version 4 (IPv4) or dual-stack (IPv4 and IPv6) address type for your service. 
+A **Public Endpoint** is the default configuration. It opens your service to any incoming traffic from the public internet. It also provides you with the flexibility to choose between IPv4 or dual-stack (IPv4 and IPv6) address types for your service.
@@ -13,5 +13 @@ A **Public Endpoint** is the default configuration. It opens your service to any
-A **Private endpoint** only allows traffic from an Amazon VPC to access your App Runner service. This is achieved by setting up a VPC interface endpoint, an AWS PrivateLink resource, for your App Runner service. Thereby, creating a private connection between the Amazon VPC and your App Runner service. 
-
-###### Note
-
-App Runner currently supports dual-stack (IPv4 and IPv6) address type only for **Public endpoint**. For **Private endpoint** , only IPv4 is supported.
+A **Private endpoint** only allows traffic from an Amazon VPC to access your App Runner service. This is achieved by setting up a VPC interface endpoint, an AWS PrivateLink resource, for your App Runner service. Thereby, creating a private connection between the Amazon VPC and your App Runner service. It also provides you with the flexibility to choose between IPv4 or dual-stack (IPv4 and IPv6) address types for your service.