AWS network-firewall documentation change
Summary
Added clarification that transit gateway-attached firewalls can't be shared via RAM, requiring transit gateway sharing instead
Security assessment
Documents security-relevant sharing limitations for network resources. While not fixing a vulnerability, it adds security documentation about proper firewall sharing methods to prevent misconfigurations.
Diff
diff --git a/network-firewall/latest/developerguide/sharing.md b/network-firewall/latest/developerguide/sharing.md index e44e2e44a..2c391bbcd 100644 --- a//network-firewall/latest/developerguide/sharing.md +++ b//network-firewall/latest/developerguide/sharing.md @@ -31,0 +32,2 @@ Consideration the following when sharing AWS Network Firewall resources: + * You can't share a firewall that's attached to a transit gateway via RAM. To enable cross-account access for transit gateway-attached firewalls, share the transit gateway itself instead. For more information, see [Create a transit gateway-attached firewall](./create-tgw-firewall.html). +