AWS AWSCloudFormation high security documentation change
Summary
Added PubliclyAccessible property documentation for Neptune DB instances
Security assessment
The change documents the PubliclyAccessible property which controls network exposure of DB instances. Public accessibility directly impacts security posture by determining if the instance has public IP exposure, with explicit guidance about security group controls and VPC isolation.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.md index fa43df1f9..2c49f947e 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-neptune-dbinstance.md @@ -63,0 +64 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "PubliclyAccessible" : Boolean, @@ -82,0 +84 @@ To declare this entity in your AWS CloudFormation template, use the following sy + PubliclyAccessible: Boolean @@ -195,0 +198,15 @@ _Required_ : No +`PubliclyAccessible` + + +Indicates whether the DB instance is publicly accessible. + +When the DB instance is publicly accessible and you connect from outside of the DB instance's virtual private cloud (VPC), its Domain Name System (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB instance, the endpoint resolves to the private IP address. Access to the DB instance is ultimately controlled by the security group it uses. That public access isn't permitted if the security group assigned to the DB cluster doesn't permit it. + +When the DB instance isn't publicly accessible, it is an internal DB instance with a DNS name that resolves to a private IP address. + +_Required_ : No + + _Type_ : Boolean + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) +