AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/ec2/modify-vpc-endpoint.md

Summary

Added documentation for PrivateDnsPreference and PrivateDnsSpecifiedDomains parameters to control private hosted zone creation for VPC endpoints

Security assessment

The change introduces documentation for DNS configuration options that let users control domain verification and hosted zone provisioning. While this improves security posture by enabling granular DNS management, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/ec2/modify-vpc-endpoint.md b/cli/latest/reference/ec2/modify-vpc-endpoint.md
index d69dc0cf0..20673bb7f 100644
--- a//cli/latest/reference/ec2/modify-vpc-endpoint.md
+++ b//cli/latest/reference/ec2/modify-vpc-endpoint.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -225,0 +226,24 @@ Syntax:
+> 
+> PrivateDnsPreference -> (string)
+>
+>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>> 
+>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the PrivateDnsSpecifiedDomains parameter.
+>> 
+
+> 
+> PrivateDnsSpecifiedDomains -> (list)
+>
+>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is verified-domains-and-specified-domains or specified-domains-only.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10`
+>> 
+
+>> 
+>> (string)
@@ -230 +254 @@ Shorthand Syntax:
-    DnsRecordIpType=string,PrivateDnsOnlyForInboundResolverEndpoint=boolean
+    DnsRecordIpType=string,PrivateDnsOnlyForInboundResolverEndpoint=boolean,PrivateDnsPreference=string,PrivateDnsSpecifiedDomains=string,string
@@ -238 +262,3 @@ JSON Syntax:
-      "PrivateDnsOnlyForInboundResolverEndpoint": true|false
+      "PrivateDnsOnlyForInboundResolverEndpoint": true|false,
+      "PrivateDnsPreference": "string",
+      "PrivateDnsSpecifiedDomains": ["string", ...]
@@ -446 +472 @@ Return -> (boolean)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »