AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/ec2/create-ipam-scope.md

Summary

Added external authority configuration support for IPAM scope integration

Security assessment

Introduces documentation for integrating with external IP management systems (like Infoblox) to control CIDR allocations, which enhances security through centralized IP management but doesn't address a specific vulnerability

Diff

diff --git a/cli/latest/reference/ec2/create-ipam-scope.md b/cli/latest/reference/ec2/create-ipam-scope.md
index f6653a02e..47fd00228 100644
--- a//cli/latest/reference/ec2/create-ipam-scope.md
+++ b//cli/latest/reference/ec2/create-ipam-scope.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -74,0 +75 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+    [--external-authority-configuration <value>]
@@ -279,0 +281,35 @@ JSON Syntax:
+`--external-authority-configuration` (structure)
+
+> The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.
+> 
+> In IPAM, an external authority is a third-party IP address management system that provides CIDR blocks when you provision address space for top-level IPAM pools. This allows you to use your existing IP management system to control which address ranges are allocated to Amazon Web Services while using Amazon VPC IPAM to manage subnets within those ranges.
+> 
+> Type -> (string)
+>
+>> The type of external authority.
+>> 
+>> Possible values:
+>> 
+>>   * `infoblox`
+>> 
+
+> 
+> ExternalResourceIdentifier -> (string)
+>
+>> The identifier for the external resource managing this scope. For Infoblox integrations, this is the Infoblox resource identifier in the format `<version>.identity.account.<entity_realm>.<entity_id>` .
+
+Shorthand Syntax:
+    
+    
+    Type=string,ExternalResourceIdentifier=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "Type": "infoblox",
+      "ExternalResourceIdentifier": "string"
+    }
+    
+
@@ -536,0 +573,22 @@ IpamScope -> (structure)
+> 
+> ExternalAuthorityConfiguration -> (structure)
+>
+>> The external authority configuration for this IPAM scope, if configured.
+>> 
+>> The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.
+>> 
+>> In IPAM, an external authority is a third-party IP address management system that provides CIDR blocks when you provision address space for top-level IPAM pools. This allows you to use your existing IP management system to control which address ranges are allocated to Amazon Web Services while using Amazon VPC IPAM to manage subnets within those ranges.
+>> 
+>> Type -> (string)
+>>
+>>> The type of external authority managing this scope. Currently supports `Infoblox` for integration with Infoblox Universal DDI.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `infoblox`
+>>> 
+
+>> 
+>> ExternalResourceIdentifier -> (string)
+>>
+>>> The identifier for the external resource managing this scope. For Infoblox integrations, this is the Infoblox resource identifier in the format `<version>.identity.account.<entity_realm>.<entity_id>` .
@@ -548 +606 @@ IpamScope -> (structure)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »