AWS vpc documentation change
Summary
Added documentation for VPC encryption controls and regional NAT gateways. Updated URLs and maintained existing entries.
Security assessment
The changes introduce documentation for new security features (VPC encryption controls for enforcing encryption in transit, regional NAT gateways with enhanced security). These are proactive security enhancements rather than fixes for existing vulnerabilities.
Diff
diff --git a/vpc/latest/userguide/WhatsNew.md b/vpc/latest/userguide/WhatsNew.md index 31a1a0954..56798f421 100644 --- a//vpc/latest/userguide/WhatsNew.md +++ b//vpc/latest/userguide/WhatsNew.md @@ -10,0 +11,2 @@ Change| Description| Date +[VPC encryption controls](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html)| You can now enforce encryption in transit for network traffic within your VPC using VPC encryption controls. This feature provides centralized encryption policy enforcement and monitoring capabilities.| November 21, 2025 +[Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html)| You can now use regional NAT gateways that automatically expand across Availability Zones based on your workload footprint. Regional NAT gateways provide simplified setup, enhanced security, and automatic high availability without manual intervention.| November 19, 2025 @@ -14,7 +16,7 @@ Change| Description| Date -[Declarative policy support for VPC BPA](https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html#security-vpc-bpa-exclusions-orgs)| If you are using AWS Organizations to manage accounts in your organization, you can use a declarative policy to enforce VPC BPA on the accounts in the organization.| December 1, 2024 -[VPC Block Public Access (BPA)](https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html)| VPC Block public Access (BPA) enables you to block resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways.| November 19, 2024 -[Shared Security Groups](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-sharing.html)| This feature enables you to share a security group with other AWS Organizations accounts.| October 30, 2024 -[Security Group VPC Associations](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-assoc.html)| This feature enables you to associate a security group with multiple VPCs in the same Region.| October 30, 2024 -[NAT gateway MTU support](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-basics.html)| NAT gateways support traffic with a maximum transmission unit (MTU) of 8500.| September 10, 2024 -[Private IPv6 addressing](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-ip-addressing.html#vpc-ipv6-addresses-private)| Information about private IPv6 addressing was added. Private IPv6 addresses are only available in Amazon VPC IP Address Manager.| August 8, 2024 -[IPv6 preferred lease time](https://docs.aws.amazon.com/vpc/latest/userguide/DHCPOptionSetConcepts.html)| You can now choose how frequently a running instance with an IPv6 assigned to it goes through DHCPv6 lease renewal.| February 20, 2024 +[Declarative policy support for VPC BPA](https://docs.aws.amazon.com//vpc/latest/userguide/security-vpc-bpa.html#security-vpc-bpa-exclusions-orgs)| If you are using AWS Organizations to manage accounts in your organization, you can use a declarative policy to enforce VPC BPA on the accounts in the organization.| December 1, 2024 +[VPC Block Public Access (BPA)](https://docs.aws.amazon.com//vpc/latest/userguide/security-vpc-bpa.html)| VPC Block public Access (BPA) enables you to block resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways.| November 19, 2024 +[Shared Security Groups](https://docs.aws.amazon.com//vpc/latest/userguide/security-group-sharing.html)| This feature enables you to share a security group with other AWS Organizations accounts.| October 30, 2024 +[Security Group VPC Associations](https://docs.aws.amazon.com//vpc/latest/userguide/security-group-assoc.html)| This feature enables you to associate a security group with multiple VPCs in the same Region.| October 30, 2024 +[NAT gateway MTU support](https://docs.aws.amazon.com//vpc/latest/userguide/nat-gateway-basics.html)| NAT gateways support traffic with a maximum transmission unit (MTU) of 8500.| September 10, 2024 +[Private IPv6 addressing](https://docs.aws.amazon.com//vpc/latest/userguide/vpc-ip-addressing.html#vpc-ipv6-addresses-private)| Information about private IPv6 addressing was added. Private IPv6 addresses are only available in Amazon VPC IP Address Manager.| August 8, 2024 +[IPv6 preferred lease time](https://docs.aws.amazon.com//vpc/latest/userguide/DHCPOptionSetConcepts.html)| You can now choose how frequently a running instance with an IPv6 assigned to it goes through DHCPv6 lease renewal.| February 20, 2024 @@ -26 +28 @@ EC2-Classic is deprecated| With EC2-Classic, EC2 instances ran in a single, flat -Aligning with IAM best practices| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html).| January 4, 2023 +Aligning with IAM best practices| Updated guide to align with the IAM best practices. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html).| January 4, 2023