AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-02-10 · Documentation low

File: cli/latest/reference/ec2/create-launch-template-version.md

Summary

Added documentation for secondary network interfaces feature, including configuration parameters like DeleteOnTermination, PrivateIpAddresses, and InterfaceType. Updated AWS CLI version and resource types.

Security assessment

The change introduces new network interface configuration options but doesn't address vulnerabilities or security weaknesses. The DeleteOnTermination parameter relates to resource management, not security controls. No security advisories or vulnerability mitigations are mentioned.

Diff

diff --git a/cli/latest/reference/ec2/create-launch-template-version.md b/cli/latest/reference/ec2/create-launch-template-version.md
index 4a40cedcc..122351950 100644
--- a//cli/latest/reference/ec2/create-launch-template-version.md
+++ b//cli/latest/reference/ec2/create-launch-template-version.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.17 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.18 Command Reference](../../index.html) »
@@ -1918,0 +1919,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+>>>>   * `secondary-interface`
+>>>>   * `secondary-network`
+>>>>   * `secondary-subnet`
@@ -2871,0 +2875,52 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+> 
+> SecondaryInterfaces -> (list)
+>
+>> The secondary interfaces to associate with instances launched from the template.
+>> 
+>> (structure)
+>>
+>>> Describes a secondary interface specification for a launch template request.
+>>> 
+>>> DeleteOnTermination -> (boolean)
+>>>
+>>>> Indicates whether the secondary interface is deleted when the instance is terminated.
+>>>> 
+>>>> The only supported value for this field is `true` .
+>>> 
+>>> DeviceIndex -> (integer)
+>>>
+>>>> The device index for the secondary interface attachment.
+>>> 
+>>> PrivateIpAddresses -> (list)
+>>>
+>>>> The private IPv4 addresses to assign to the secondary interface.
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> Describes a private IPv4 address specification for a secondary interface request.
+>>>>> 
+>>>>> PrivateIpAddress -> (string)
+>>>>>
+>>>>>> The private IPv4 address.
+>>> 
+>>> PrivateIpAddressCount -> (integer)
+>>>
+>>>> The number of private IPv4 addresses to assign to the secondary interface.
+>>> 
+>>> SecondarySubnetId -> (string)
+>>>
+>>>> The ID of the secondary subnet.
+>>> 
+>>> InterfaceType -> (string)
+>>>
+>>>> The type of secondary interface.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `secondary`
+>>>> 
+
+>>> 
+>>> NetworkCardIndex -> (integer)
+>>>
+>>>> The index of the network card.
@@ -2985 +3040 @@ JSON Syntax:
-          "ResourceType": "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"declarative-policies-report"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"image-usage-report"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"outpost-lag"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"service-link-virtual-interface"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-metering-policy"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"verified-access-instance"|"verified-access-group"|"verified-access-endpoint"|"verified-access-policy"|"verified-access-trust-provider"|"vpn-connection-device-type"|"vpc-block-public-access-exclusion"|"vpc-encryption-control"|"route-server"|"route-server-endpoint"|"route-server-peer"|"ipam-resource-discovery"|"ipam-resource-discovery-association"|"instance-connect-endpoint"|"verified-access-endpoint-target"|"ipam-external-resource-verification-token"|"capacity-block"|"mac-modification-task"|"ipam-prefix-list-resolver"|"ipam-policy"|"ipam-prefix-list-resolver-target"|"capacity-manager-data-export"|"vpn-concentrator",
+          "ResourceType": "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"declarative-policies-report"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"image-usage-report"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"outpost-lag"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"service-link-virtual-interface"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-metering-policy"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"verified-access-instance"|"verified-access-group"|"verified-access-endpoint"|"verified-access-policy"|"verified-access-trust-provider"|"vpn-connection-device-type"|"vpc-block-public-access-exclusion"|"vpc-encryption-control"|"route-server"|"route-server-endpoint"|"route-server-peer"|"ipam-resource-discovery"|"ipam-resource-discovery-association"|"instance-connect-endpoint"|"verified-access-endpoint-target"|"ipam-external-resource-verification-token"|"capacity-block"|"mac-modification-task"|"ipam-prefix-list-resolver"|"ipam-policy"|"ipam-prefix-list-resolver-target"|"secondary-interface"|"secondary-network"|"secondary-subnet"|"capacity-manager-data-export"|"vpn-concentrator",
@@ -3132,0 +3188,8 @@ JSON Syntax:
+      },
+      "SecondaryInterfaces": [
+        {
+          "DeleteOnTermination": true|false,
+          "DeviceIndex": integer,
+          "PrivateIpAddresses": [
+            {
+              "PrivateIpAddress": "string"
@@ -3133,0 +3197,9 @@ JSON Syntax:
+            ...
+          ],
+          "PrivateIpAddressCount": integer,
+          "SecondarySubnetId": "string",
+          "InterfaceType": "secondary",
+          "NetworkCardIndex": integer
+        }
+        ...
+      ]
@@ -5006,0 +5079,3 @@ LaunchTemplateVersion -> (structure)
+>>>>>   * `secondary-interface`
+>>>>>   * `secondary-network`
+>>>>>   * `secondary-subnet`
@@ -5923,0 +5999,56 @@ LaunchTemplateVersion -> (structure)
+>> 
+>> SecondaryInterfaces -> (list)
+>>
+>>> The secondary interfaces associated with the launch template.
+>>> 
+>>> (structure)
+>>>
+>>>> Describes a secondary interface specification in a launch template.
+>>>> 
+>>>> DeleteOnTermination -> (boolean)
+>>>>
+>>>>> Indicates whether the secondary interface is deleted when the instance is terminated.
+>>>>> 
+>>>>> The only supported value for this field is `true` .
+>>>> 
+>>>> DeviceIndex -> (integer)
+>>>>
+>>>>> The device index for the secondary interface attachment.
+>>>> 
+>>>> PrivateIpAddresses -> (list)
+>>>>
+>>>>> The private IPv4 addresses to assign to the secondary interface.
+>>>>> 
+>>>>> If you specify `privateIpAddresses` you cannot specify `privateIpAddressCount`
+>>>>> 
+>>>>> (structure)
+>>>>>
+>>>>>> Describes a private IPv4 address specification for a secondary interface.
+>>>>>> 
+>>>>>> PrivateIpAddress -> (string)
+>>>>>>
+>>>>>>> The private IPv4 address.
+>>>> 
+>>>> PrivateIpAddressCount -> (integer)
+>>>>
+>>>>> The number of private IPv4 addresses to assign to the secondary interface.
+>>>>> 
+>>>>> If you specify `privateIpAddressCount` you cannot specify `privateIpAddresses`
+>>>> 
+>>>> SecondarySubnetId -> (string)
+>>>>
+>>>>> The ID of the secondary subnet.
+>>>> 
+>>>> InterfaceType -> (string)
+>>>>
+>>>>> The type of secondary interface.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `secondary`
+>>>>> 
+
+>>>> 
+>>>> NetworkCardIndex -> (integer)
+>>>>
+>>>>> The index of the network card.
@@ -5967 +6098 @@ Warning -> (structure)
-  * [AWS CLI 2.33.17 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.18 Command Reference](../../index.html) »