AWS Security ChangesHomeSearch

AWS securityagent documentation change

Service: securityagent · 2026-03-25 · Documentation medium

File: securityagent/latest/userguide/connect-agent-vpc.md

Summary

Updated private IP address ranges for testing endpoints in a private VPC from specific subnets to broader standard private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).

Security assessment

The change expands the allowed private IP ranges to standard RFC 1918 ranges, which could affect security testing scope but doesn't indicate a specific security vulnerability. It updates security-related configuration documentation.

Diff

diff --git a/securityagent/latest/userguide/connect-agent-vpc.md b/securityagent/latest/userguide/connect-agent-vpc.md
index 61c056adb..37ac8e0cf 100644
--- a//securityagent/latest/userguide/connect-agent-vpc.md
+++ b//securityagent/latest/userguide/connect-agent-vpc.md
@@ -16,3 +16,3 @@ When testing endpoints in a private VPC, only endpoints resolving to IPs in know
-    10.0.0.0/16
-    172.31.0.0/16
-    192.168.0.0/20
+    10.0.0.0/8
+    172.16.0.0/12
+    192.168.0.0/16