AWS directconnect documentation change
Summary
Added three new CloudWatch metrics for Direct Connect virtual interfaces: VirtualInterfaceBgpStatus, VirtualInterfaceBgpPrefixesAccepted, and VirtualInterfaceBgpPrefixesAdvertised.
Security assessment
The change adds monitoring metrics for BGP peering sessions and prefix advertisements, which are operational metrics for network health and performance. There is no evidence in the diff that this change addresses a specific security vulnerability, weakness, or incident. While BGP monitoring can indirectly support security by detecting anomalies, the documentation itself does not mention security implications or features.
Diff
diff --git a/directconnect/latest/UserGuide/monitoring-cloudwatch.md b/directconnect/latest/UserGuide/monitoring-cloudwatch.md index 25782c48e..f4f54c745 100644 --- a//directconnect/latest/UserGuide/monitoring-cloudwatch.md +++ b//directconnect/latest/UserGuide/monitoring-cloudwatch.md @@ -63,0 +64,3 @@ Metric | Description +`VirtualInterfaceBgpStatus` | The state of the BGP peering session for the virtual interface. 1 indicates **up** and 0 indicates **down**. Units: There are no units returned for this metric. +`VirtualInterfaceBgpPrefixesAccepted` | The number of BGP prefixes accepted from the BGP peer on the virtual interface. The number reported is the aggregate (average) over the specified time period (5 minutes by default). Units: Count +`VirtualInterfaceBgpPrefixesAdvertised` | The number of BGP prefixes advertised to the BGP peer on the virtual interface. The number reported is the aggregate (average) over the specified time period (5 minutes by default). Units: Count