AWS mwaa documentation change
Summary
Added IPv6 subnet note and replaced 'see' with 'refer to' in multiple links. Clarified network type immutability and access mode requirements.
Security assessment
The IPv6 note clarifies network configuration constraints but does not address a security vulnerability. Other changes are editorial link phrasing updates. No evidence of security incident remediation or new security controls added.
Diff
diff --git a/mwaa/latest/userguide/create-environment.md b/mwaa/latest/userguide/create-environment.md index c31ab452d..9ddb42899 100644 --- a//mwaa/latest/userguide/create-environment.md +++ b//mwaa/latest/userguide/create-environment.md @@ -38,0 +39,4 @@ Amazon Managed Workflows for Apache Airflow sets up Apache Airflow on an environ +###### Note + +Amazon MWAA dynamically determines the network during creation. If you use IPv6 subnets, Amazon MWAA creates IPv6 private link connectivity to the database and webserver. Amazon MWAA does not support transitioning between network types and cannot upgrade existing environments to IPv6. + @@ -123 +127 @@ This step populates two of the private subnets in your Amazon VPC. -Choose the **Private network** option if your Apache Airflow UI is only accessed within a corporate network, and you do not require access to public repositories for web server requirements installation. If you choose this access mode option, you need to create a mechanism to access your Apache Airflow _Web server_ in your Amazon VPC. For more information, see [Accessing the VPC endpoint for your Apache Airflow Web server (private network access)](./vpc-vpe-access.html#vpc-vpe-access-endpoints). +Choose the **Private network** option if your Apache Airflow UI is only accessed within a corporate network, and you do not require access to public repositories for web server requirements installation. If you choose this access mode option, you need to create a mechanism to access your Apache Airflow _Web server_ in your Amazon VPC. For more information, refer to [Accessing the VPC endpoint for your Apache Airflow Web server (private network access)](./vpc-vpe-access.html#vpc-vpe-access-endpoints). @@ -135 +139 @@ Choose the **Private network** option if your Apache Airflow UI is only accessed -An existing Amazon VPC security group must be configured with specific inbound and outbound rules to allow network traffic. To learn more, see [Security in your VPC on Amazon MWAA](./vpc-security.html). +An existing Amazon VPC security group must be configured with specific inbound and outbound rules to allow network traffic. To learn more, refer to [Security in your VPC on Amazon MWAA](./vpc-security.html). @@ -143 +147 @@ We recommend choosing the smallest size necessary to support your workload. You -For more information, see [Example high performance use case](./mwaa-autoscaling.html#mwaa-autoscaling-high-volume). +For more information, refer to [Example high performance use case](./mwaa-autoscaling.html#mwaa-autoscaling-high-volume). @@ -147 +151 @@ For more information, see [Example high performance use case](./mwaa-autoscaling -For more information about web server automatic scaling, see [Configuring Amazon MWAA web server automatic scaling](./mwaa-web-server-autoscaling.html). +For more information about web server automatic scaling, refer to [Configuring Amazon MWAA web server automatic scaling](./mwaa-web-server-autoscaling.html).