AWS config documentation change
Summary
1. Rephrased rule description for clarity 2. Removed 'AWS Secret - West' from unsupported regions list
Security assessment
Description change improves clarity without altering security meaning. Region update expands availability documentation. VPN tunnel status monitoring is for availability/security, but no vulnerabilities are addressed.
Diff
diff --git a/config/latest/developerguide/vpc-vpn-2-tunnels-up.md b/config/latest/developerguide/vpc-vpn-2-tunnels-up.md index bc195a3d5..3828be21a 100644 --- a//config/latest/developerguide/vpc-vpn-2-tunnels-up.md +++ b//config/latest/developerguide/vpc-vpn-2-tunnels-up.md @@ -9 +9 @@ AWS CloudFormation template -Checks that both VPN tunnels provided by AWS Site-to-Site VPN are in UP status. The rule returns NON_COMPLIANT if one or both tunnels are in DOWN status. +Checks if both virtual private network (VPN) tunnels provided by AWS Site-to-Site VPN are in UP status. The rule is NON_COMPLIANT if one or both tunnels are in DOWN status. @@ -17 +17 @@ Checks that both VPN tunnels provided by AWS Site-to-Site VPN are in UP status. -**AWS Region:** All supported AWS regions except Middle East (Bahrain), China (Beijing), AWS Secret - West, Asia Pacific (Osaka), Israel (Tel Aviv), China (Ningxia) Region +**AWS Region:** All supported AWS regions except Middle East (Bahrain), China (Beijing), Asia Pacific (Osaka), Israel (Tel Aviv), China (Ningxia) Region