AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/ec2/create-vpc-endpoint.md

Summary

Added PrivateDnsPreference and PrivateDnsSpecifiedDomains parameters to control private hosted zone creation for VPC endpoints

Security assessment

The changes document DNS configuration controls that help prevent unauthorized domain associations by requiring verification or explicit specification of domains. While this enhances security through better access control, there's no evidence of addressing a specific existing vulnerability.

Diff

diff --git a/cli/latest/reference/ec2/create-vpc-endpoint.md b/cli/latest/reference/ec2/create-vpc-endpoint.md
index 3d0fedea1..ee8c1b9f7 100644
--- a//cli/latest/reference/ec2/create-vpc-endpoint.md
+++ b//cli/latest/reference/ec2/create-vpc-endpoint.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -208,0 +209,24 @@ Syntax:
+> 
+> PrivateDnsPreference -> (string)
+>
+>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>> 
+>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>> 
+
+> 
+> PrivateDnsSpecifiedDomains -> (list)
+>
+>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is verified-domains-and-specified-domains or specified-domains-only.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10`
+>> 
+
+>> 
+>> (string)
@@ -213 +237 @@ Shorthand Syntax:
-    DnsRecordIpType=string,PrivateDnsOnlyForInboundResolverEndpoint=boolean
+    DnsRecordIpType=string,PrivateDnsOnlyForInboundResolverEndpoint=boolean,PrivateDnsPreference=string,PrivateDnsSpecifiedDomains=string,string
@@ -221 +245,3 @@ JSON Syntax:
-      "PrivateDnsOnlyForInboundResolverEndpoint": true|false
+      "PrivateDnsOnlyForInboundResolverEndpoint": true|false,
+      "PrivateDnsPreference": "string",
+      "PrivateDnsSpecifiedDomains": ["string", ...]
@@ -889,0 +916,24 @@ VpcEndpoint -> (structure)
+>> 
+>> PrivateDnsPreference -> (string)
+>>
+>>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>>> 
+>>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>> 
+
+>> 
+>> PrivateDnsSpecifiedDomains -> (list)
+>>
+>>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `10`
+>>> 
+
+>>> 
+>>> (string)
@@ -1027 +1077 @@ ClientToken -> (string)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »