AWS mwaa documentation change
Summary
Added IPv6 subnet configuration details, including enabling IPv6 addresses and requiring an egress-only internet gateway (EIGW) for private subnets.
Security assessment
The changes document IPv6 networking requirements, including the use of EIGW for secure outbound traffic in private subnets. While this clarifies secure network architecture, it does not address a specific security vulnerability. The addition of EIGW guidance relates to security best practices for IPv6.
Diff
diff --git a/mwaa/latest/userguide/networking-about.md b/mwaa/latest/userguide/networking-about.md index a3b11b187..16156adf9 100644 --- a//mwaa/latest/userguide/networking-about.md +++ b//mwaa/latest/userguide/networking-about.md @@ -96,0 +97,4 @@ This section describes the Amazon VPC infrastructure of an environment with publ + * Set `assignIpV6AddressOnCreation` to `true` for IPv6 subnets. + + * For IPv6 private subnets, you must have a connection to an egress-only internet gateway (EIGW). + @@ -189 +193 @@ If Internet access in your VPC is allowed by your organization, _and_ you would - 3. **What we recommend** : We recommend using the AWS CloudFormation quick-start template that creates the Amazon VPC infrastructure, an Amazon S3 bucket, and an Amazon MWAA environment at the same time. To learn more, see [Quick start tutorial for Amazon Managed Workflows for Apache Airflow](./quick-start.html). + 3. **What we recommend** : We recommend using the AWS CloudFormation quick-start template that creates the Amazon VPC infrastructure, an Amazon S3 bucket, and an Amazon MWAA environment at the same time. To learn more, refer to [Quick start tutorial for Amazon Managed Workflows for Apache Airflow](./quick-start.html).