AWS Security ChangesHomeSearch

AWS mwaa documentation change

Service: mwaa · 2025-10-25 · Documentation low

File: mwaa/latest/userguide/vpc-vpe-access.md

Summary

Grammatical improvements and rephrasing of VPC endpoint and AWS Client VPN descriptions.

Security assessment

Changes are stylistic and do not alter security implications. The AWS Client VPN description maintains existing security context (TLS connection) without adding new security documentation.

Diff

diff --git a/mwaa/latest/userguide/vpc-vpe-access.md b/mwaa/latest/userguide/vpc-vpe-access.md
index 240237862..eddf05c98 100644
--- a//mwaa/latest/userguide/vpc-vpe-access.md
+++ b//mwaa/latest/userguide/vpc-vpe-access.md
@@ -9 +9 @@ PricingVPC endpoint overviewPermission to use other AWS servicesAccessing VPC en
-A VPC endpoint (AWS PrivateLink) enables you to privately connect your VPC to services hosted on AWS without requiring an internet gateway, a NAT device, VPN, or firewall proxies. These endpoints are horizontally scalable and highly available virtual devices that allow communication between instances in your VPC and AWS services. This page describes the VPC endpoints created by Amazon MWAA, and how to access the VPC endpoint for your Apache Airflow webserver if you've chosen the **Private network** access mode on Amazon Managed Workflows for Apache Airflow.
+A VPC endpoint (AWS PrivateLink) you can use to privately connect your VPC to services hosted on AWS without requiring an internet gateway, a NAT device, VPN, or firewall proxies. These endpoints are horizontally scalable and highly available virtual devices that allow communication between instances in your VPC and AWS services. This page describes the VPC endpoints created by Amazon MWAA, and how to access the VPC endpoint for your Apache Airflow webserver if you've chosen the **Private network** access mode on Amazon Managed Workflows for Apache Airflow.
@@ -75 +75 @@ If you chose the **Private network** access mode for your Apache Airflow webserv
-The interface endpoints use the execution role for your environment in AWS Identity and Access Management (IAM) to manage permission to AWS resources used by your environment. As more AWS services are enabled for an environment, each service will require you to configure permission using your environment's execution role. To add permissions, refer to [Amazon MWAA execution role](./mwaa-create-role.html).
+The interface endpoints use the execution role for your environment in AWS Identity and Access Management (IAM) to manage permission to AWS resources used by your environment. As more AWS services are turned on for an environment, each service requires you to configure permission using your environment's execution role. To add permissions, refer to [Amazon MWAA execution role](./mwaa-create-role.html).
@@ -146 +146 @@ If you've chosen the **Private network** access mode for your Apache Airflow web
-AWS Client VPN is a managed client-based VPN service that enables you to securely access your AWS resources and resources in your on-premises network. It provides a secure TLS connection from any location using the OpenVPN client.
+AWS Client VPN is a managed client-based VPN service that you can use to securely access your AWS resources and resources in your on-premises network. It provides a secure TLS connection from any location using the OpenVPN client.