AWS cli medium security documentation change
Summary
Added VpcTransitConfiguration documentation with VPC ID and CIDR block requirements for AWS Transit Gateway integration. Updated syntax examples and response structures to include new network configuration parameters.
Security assessment
The changes introduce network security controls by documenting required CIDR block validation (pattern: valid IPv4 CIDR format) and explicit VPC isolation rules. The added constraints prevent overlapping CIDR blocks with service VPCs, reducing risk of network misconfigurations that could expose resources. The TransitGatewayResourceShareArn requirement enforces resource sharing authorization through AWS RAM.
Diff
diff --git a/cli/latest/reference/gameliftstreams/add-stream-group-locations.md b/cli/latest/reference/gameliftstreams/add-stream-group-locations.md index 9aefd6add..6be327855 100644 --- a//cli/latest/reference/gameliftstreams/add-stream-group-locations.md +++ b//cli/latest/reference/gameliftstreams/add-stream-group-locations.md @@ -15 +15 @@ - * [AWS CLI 2.34.8 Command Reference](../../index.html) » + * [AWS CLI 2.34.9 Command Reference](../../index.html) » @@ -177,0 +178,34 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/gameli +>> +>> VpcTransitConfiguration -> (structure) +>> +>>> Configuration for connecting the stream group to resources in your Amazon VPC using AWS Transit Gateway. This setting is optional. If specified, Amazon GameLift Streams creates a Transit Gateway to enable private network connectivity between the service VPC and your VPC. The VPC ID cannot be changed after the stream group is created, but you can update the CIDR blocks by calling [UpdateStreamGroup](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_UpdateStreamGroup.html) . +>>> +>>> VpcId -> (string) [required] +>>> +>>>> The ID of the Amazon VPC that you want to connect to the stream group. The VPC must be in the same Amazon Web Services account as the stream group. This value cannot be changed after the stream group is created. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `32` +>>>> + +>>> +>>> Ipv4CidrBlocks -> (list) [required] +>>> +>>>> A list of IPv4 CIDR blocks in your VPC that you want the stream group to be able to access. You can specify up to 5 CIDR blocks. The CIDR blocks must be valid subsets of the VPC’s CIDR blocks and cannot overlap with the service VPC CIDR block. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `5` +>>>> + +>>>> +>>>> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * pattern: `(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])/([0-9]|[1-2][0-9]|3[0-2])` +>>>>> + @@ -182 +216 @@ Shorthand Syntax: - LocationName=string,AlwaysOnCapacity=integer,OnDemandCapacity=integer,TargetIdleCapacity=integer,MaximumCapacity=integer ... + LocationName=string,AlwaysOnCapacity=integer,OnDemandCapacity=integer,TargetIdleCapacity=integer,MaximumCapacity=integer,VpcTransitConfiguration={VpcId=string,Ipv4CidrBlocks=[string,string]} ... @@ -194 +228,5 @@ JSON Syntax: - "MaximumCapacity": integer + "MaximumCapacity": integer, + "VpcTransitConfiguration": { + "VpcId": "string", + "Ipv4CidrBlocks": ["string", ...] + } @@ -444,0 +483,52 @@ Locations -> (list) +>> +>> InternalVpcIpv4CidrBlock -> (string) +>> +>>> The CIDR block of the service VPC for this location. Add this CIDR block to your VPC route table to enable traffic routing through the Transit Gateway. +>>> +>>> Constraints: +>>> +>>> * pattern: `(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])/([0-9]|[1-2][0-9]|3[0-2])` +>>> + +>> +>> VpcTransitConfiguration -> (structure) +>> +>>> The VPC transit configuration for this location, including the Transit Gateway details needed to complete the VPC attachment setup. +>>> +>>> VpcId -> (string) +>>> +>>>> The ID of the Amazon VPC that is connected to the stream group. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `32` +>>>> + +>>> +>>> Ipv4CidrBlocks -> (list) +>>> +>>>> The IPv4 CIDR blocks in your VPC that the stream group can access. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `5` +>>>> + +>>>> +>>>> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * pattern: `(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])/([0-9]|[1-2][0-9]|3[0-2])` +>>>>> + +>>> +>>> TransitGatewayId -> (string) +>>> +>>>> The ID of the Transit Gateway that Amazon GameLift Streams created for this VPC connection. Use this ID when creating your VPC attachment. +>>> +>>> TransitGatewayResourceShareArn -> (string) +>>> +>>>> The ARN of the AWS Resource Access Manager resource share for the Transit Gateway. You must accept this resource share before you can create a VPC attachment. @@ -456 +546 @@ Locations -> (list) - * [AWS CLI 2.34.8 Command Reference](../../index.html) » + * [AWS CLI 2.34.9 Command Reference](../../index.html) »