AWS cli documentation change

Service: cli · 2025-11-10 · Documentation medium

File: cli/latest/reference/vpc-lattice/create-service-network-vpc-association.md

Summary

Added --private-dns-enabled and --dns-options parameters with DNS configuration details for VPC associations

Security assessment

The changes introduce documentation for DNS configuration options that control private hosted zone creation and domain verification. While these are security-adjacent controls for DNS management, there's no evidence they address a specific vulnerability. The documentation adds security-related capabilities for domain verification controls.

Diff

diff --git a/cli/latest/reference/vpc-lattice/create-service-network-vpc-association.md b/cli/latest/reference/vpc-lattice/create-service-network-vpc-association.md
index d8e165ea1..116cf3ee3 100644
--- a//cli/latest/reference/vpc-lattice/create-service-network-vpc-association.md
+++ b//cli/latest/reference/vpc-lattice/create-service-network-vpc-association.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -76,0 +77 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    [--private-dns-enabled | --no-private-dns-enabled]
@@ -78,0 +80 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    [--dns-options <value>]
@@ -138,0 +141,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+`--private-dns-enabled` | `--no-private-dns-enabled` (boolean)
+
+> Indicates if private DNS is enabled for the VPC association.
+
@@ -215,0 +222,59 @@ JSON Syntax:
+`--dns-options` (structure)
+
+> DNS options for the service network VPC association.
+> 
+> privateDnsPreference -> (string)
+>
+>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>> 
+>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
+>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
+>> 
+
+>> 
+>> Possible values:
+>> 
+>>   * `VERIFIED_DOMAINS_ONLY`
+>>   * `ALL_DOMAINS`
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS`
+>>   * `SPECIFIED_DOMAINS_ONLY`
+>> 
+
+> 
+> privateDnsSpecifiedDomains -> (list)
+>
+>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `10`
+>> 
+
+>> 
+>> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>> 
+
+
+Shorthand Syntax:
+    
+    
+    privateDnsPreference=string,privateDnsSpecifiedDomains=string,string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "privateDnsPreference": "VERIFIED_DOMAINS_ONLY"|"ALL_DOMAINS"|"VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS"|"SPECIFIED_DOMAINS_ONLY",
+      "privateDnsSpecifiedDomains": ["string", ...]
+    }
+    
+
@@ -415,0 +481,48 @@ securityGroupIds -> (list)
+privateDnsEnabled -> (boolean)
+
+> Indicates if private DNS is enabled for the VPC association.
+
+dnsOptions -> (structure)
+
+> The DNS configuration options.
+> 
+> privateDnsPreference -> (string)
+>
+>> The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+>> 
+>>   * `ALL_DOMAINS` \- VPC Lattice provisions private hosted zones for all custom domain names.
+>>   * `VERIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` \- VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
+>>   * `SPECIFIED_DOMAINS_ONLY` \- VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
+>> 
+
+>> 
+>> Possible values:
+>> 
+>>   * `VERIFIED_DOMAINS_ONLY`
+>>   * `ALL_DOMAINS`
+>>   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS`
+>>   * `SPECIFIED_DOMAINS_ONLY`
+>> 
+
+> 
+> privateDnsSpecifiedDomains -> (list)
+>
+>> Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `10`
+>> 
+
+>> 
+>> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>> 
+
+
@@ -426 +539 @@ securityGroupIds -> (list)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »