AWS vpc documentation change
Summary
Added VPN Concentrator attachment support and updated terminology (e.g., 'AWS Direct Connect' to 'Direct Connect')
Security assessment
Documentation expands feature support (VPN Concentrator) and standardizes service names. No security vulnerabilities addressed
Diff
diff --git a/vpc/latest/tgw/how-transit-gateways-work.md b/vpc/latest/tgw/how-transit-gateways-work.md index 4d11888ae..2050e2263 100644 --- a//vpc/latest/tgw/how-transit-gateways-work.md +++ b//vpc/latest/tgw/how-transit-gateways-work.md @@ -51,0 +52,2 @@ A transit gateway attachment is both a source and a destination of packets. You + * One or more VPN Concentrators + @@ -74,0 +77,2 @@ AWS Transit Gateway supports Equal Cost Multipath (ECMP) routing for most attach + * VPN Concentrator - VPN Concentrator does not support ECMP. + @@ -142 +146 @@ For a VPC attachment, the CIDR blocks of the VPC are propagated to the transit g -When dynamic routing is used with a VPN attachment or a Direct Connect gateway attachment, you can propagate the routes learned from the on-premises router through BGP to any of the transit gateway route tables. +When dynamic routing is used with a VPN attachment, VPN Concentrator attachment or a Direct Connect gateway attachment, you can propagate the routes learned from the on-premises router through BGP to any of the transit gateway route tables. @@ -144 +148 @@ When dynamic routing is used with a VPN attachment or a Direct Connect gateway a -When dynamic routing is used with a VPN attachment, the routes in the route table associated with the VPN attachment are advertised to the customer gateway through BGP. +When dynamic routing is used with a VPN attachment or a VPN Concentrator attachment, the routes in the route table associated with the VPN attachment or VPN Concentrator attachment are advertised to the customer gateway through BGP. @@ -179,0 +184,2 @@ Transit gateway routes are evaluated in the following order: + * Site-to-Site VPN-Concentrator propagated routes + @@ -222 +228 @@ Destination | Target | Priority -The following example shows a transit gateway route table. If you prefer the AWS Direct Connect gateway attachment to the VPN attachment, use a BGP VPN connection and propagate the routes in the transit gateway route table. +The following example shows a transit gateway route table. If you prefer the Direct Connect gateway attachment to the VPN attachment, use a BGP VPN connection and propagate the routes in the transit gateway route table. @@ -228 +234 @@ Destination | Attachment (Target) | Resource type | Route type | Priority -172.31.0.0/16 | tgw-attach-456 | dxgw_id | AWS Direct Connect gateway | Propagated | 3 +172.31.0.0/16 | tgw-attach-456 | dxgw_id | Direct Connect gateway | Propagated | 3 @@ -761 +767 @@ For the VPC attachment for VPC C, enable appliance mode support so that response -The Amazon VPC console supports appliance mode. You can also use the Amazon VPC API, an AWS SDK, the AWS CLI to enable appliance mode, or AWS CloudFormation. For example, add `--options ApplianceModeSupport=enable` to the [create-transit-gateway-vpc-attachment](https://docs.aws.amazon.com/cli/latest/reference/ec2/create-transit-gateway-vpc-attachment.html) or [modify-transit-gateway-vpc-attachment](https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-transit-gateway-vpc-attachment.html) command. +The Amazon VPC console supports appliance mode. You can also use the Amazon VPC API, an AWS SDK, the AWS CLI to enable appliance mode, or CloudFormation. For example, add `--options ApplianceModeSupport=enable` to the [create-transit-gateway-vpc-attachment](https://docs.aws.amazon.com/cli/latest/reference/ec2/create-transit-gateway-vpc-attachment.html) or [modify-transit-gateway-vpc-attachment](https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-transit-gateway-vpc-attachment.html) command.