AWS Security ChangesHomeSearch

AWS network-manager documentation change

Service: network-manager · 2025-11-22 · Documentation low

File: network-manager/latest/cloudwan/cloudwan-attachments-viewing-editing-vpn.md

Summary

Added documentation for managing VPN attachment routing policy labels and associations

Security assessment

Documents security-adjacent features (routing policy management) but does not address vulnerabilities. Proper routing policy configuration impacts network security posture, but the change itself is procedural documentation.

Diff

diff --git a/network-manager/latest/cloudwan/cloudwan-attachments-viewing-editing-vpn.md b/network-manager/latest/cloudwan/cloudwan-attachments-viewing-editing-vpn.md
index 343974e69..7182e604c 100644
--- a//network-manager/latest/cloudwan/cloudwan-attachments-viewing-editing-vpn.md
+++ b//network-manager/latest/cloudwan/cloudwan-attachments-viewing-editing-vpn.md
@@ -5 +5 @@
-View a Site-to-Site VPN attachment using the command line or API
+View and edit a VPN attachmentManage a VPN attachment routing policy labelView a Site-to-Site VPN attachment using the command line or API
@@ -10,0 +11,2 @@ You can view and edit configuration information for a VPN attachment, as well as
+## View and edit a VPN attachment
+
@@ -39,0 +42,48 @@ You can view and edit configuration information for a VPN attachment, as well as
+## Manage a VPN attachment routing policy label
+
+You can create, modify, or delete routing policy labels for an attachment. Once you add or modify a routing policy label, you'll need to map or remap it to an attachment routing policy. Deleting a routing policy label removes any association with an attachment routing policy.
+
+###### To manage attachment routing policy labels
+
+  1. Access the Network Manager console at [https://console.aws.amazon.com/networkmanager/home/](https://console.aws.amazon.com/networkmanager/home).
+
+  2. Under **Connectivity** , choose **Global networks**.
+
+  3. On the **Global networks** page, choose the global network link for the core network with the attachment.
+
+  4. In the navigation pane under the name of the global network, choose **Attachments**.
+
+  5. Choose the attachment.
+
+  6. In the section showing details about the attachment, choose the **Routing policy** tab, choose **Edit**.
+
+  7. Choose **Create** to create a new routing policy label, or choose **Edit** modify the **Routing policy label** as needed.
+
+  8. After creating or modifying a routing policy label, you can then associate that label with an attachment routing policy.
+
+  9. In the **Attachment routing policy association** section choose the attachment routing policy association you want to map to the routing policy label.
+
+
+
+
+You can delete a routing policy labels for an attachment. Once you delete an attachment, the association from an attachment routing policy is removed permanently.
+
+###### To delete an attachment routing policy label
+
+  1. Access the Network Manager console at [https://console.aws.amazon.com/networkmanager/home/](https://console.aws.amazon.com/networkmanager/home).
+
+  2. Under **Connectivity** , choose **Global networks**.
+
+  3. On the **Global networks** page, choose the global network link for the core network with the attachment.
+
+  4. In the navigation pane under the name of the global network, choose **Attachments**.
+
+  5. Choose the attachment.
+
+  6. In the section showing details about the attachment, choose the **Routing policy** tab, choose **Delete**.
+
+  7. Choose **Delete** again to confirm the removal. If the routing policy label was mapped to an attachment routing policy, the **Attachment routing policy association** section updates and removes the policy from the list. 
+
+
+
+