AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/ec2/describe-vpc-endpoints.md

Summary

Added documentation for PrivateDnsPreference and PrivateDnsSpecifiedDomains parameters related to VPC endpoint DNS configuration

Security assessment

The new parameters document security controls for private DNS zone creation (e.g., domain verification requirements). While this enhances security visibility, there is no evidence of addressing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/ec2/describe-vpc-endpoints.md b/cli/latest/reference/ec2/describe-vpc-endpoints.md
index c888758a5..39cf8d714 100644
--- a//cli/latest/reference/ec2/describe-vpc-endpoints.md
+++ b//cli/latest/reference/ec2/describe-vpc-endpoints.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -502,0 +503,24 @@ VpcEndpoints -> (list)
+>>> 
+>>> PrivateDnsPreference -> (string)
+>>>
+>>>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>>>> 
+>>>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>>> 
+
+>>> 
+>>> PrivateDnsSpecifiedDomains -> (list)
+>>>
+>>>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `10`
+>>>> 
+
+>>>> 
+>>>> (string)
@@ -640 +664 @@ NextToken -> (string)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »