AWS AWSCloudFormation documentation change
Summary
Added DnsOptions and PrivateDnsEnabled properties, updated security group documentation URL
Security assessment
DNS configuration options and private DNS settings help control network exposure. The security group documentation URL update maintains accurate references but doesn't indicate a security issue.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-servicenetworkvpcassociation.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-servicenetworkvpcassociation.md index 32eb3cf57..ed201717d 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-servicenetworkvpcassociation.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-servicenetworkvpcassociation.md @@ -26,0 +27,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "DnsOptions" : [DnsOptions](./aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html), + "PrivateDnsEnabled" : Boolean, @@ -39,0 +42,3 @@ To declare this entity in your CloudFormation template, use the following syntax + DnsOptions: + [DnsOptions](./aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html) + PrivateDnsEnabled: Boolean @@ -49,0 +55,22 @@ To declare this entity in your CloudFormation template, use the following syntax +`DnsOptions` + + +The DNS options for the service network VPC association. + +_Required_ : No + + _Type_ : [DnsOptions](./aws-properties-vpclattice-servicenetworkvpcassociation-dnsoptions.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`PrivateDnsEnabled` + + +Indicates if private DNS is enabled for the service network VPC association. + +_Required_ : No + + _Type_ : Boolean + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -53 +80 @@ To declare this entity in your CloudFormation template, use the following syntax -The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) in the _Amazon VPC User Guide_. +The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html) in the _Amazon VPC User Guide_. @@ -178 +205 @@ Tag -Tag +DnsOptions