AWS mwaa low security documentation change

Service: mwaa · 2025-08-28 · Security-related low

File: mwaa/latest/userguide/call-mwaa-apis-web.md

Summary

Added IPv6 note specifying domain URL uses *.on.aws instead of *.amazonaws.com

Security assessment

Ensures correct domain configuration for IPv6 endpoints. Using the wrong domain could lead to misconfigured connections or potential man-in-middle risks if traffic is routed incorrectly. While not explicitly patching a vulnerability, it addresses a configuration detail critical for secure endpoint communication.

Diff

diff --git a/mwaa/latest/userguide/call-mwaa-apis-web.md b/mwaa/latest/userguide/call-mwaa-apis-web.md
index 4e15cb8ec..dbdb9145a 100644
--- a//mwaa/latest/userguide/call-mwaa-apis-web.md
+++ b//mwaa/latest/userguide/call-mwaa-apis-web.md
@@ -10,0 +11,4 @@ You can use the commands on this page to create a web server access token. An ac
+###### Note
+
+For IPv6, the domain URL for web servers is `*.on.aws`, not `*.amazonaws.com`.
+