AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-22 · Documentation low

File: cli/latest/reference/ec2/associate-client-vpn-target-network.md

Summary

Updated AWS CLI version, made --subnet-id optional, and added --availability-zone and --availability-zone-id parameters for Transit Gateway-based Client VPN endpoints

Security assessment

This change documents new parameters for associating Client VPN endpoints with Transit Gateway, which is a security feature (Client VPN). However, there is no evidence of addressing a specific security vulnerability. The change enhances documentation for a security service.

Diff

diff --git a/cli/latest/reference/ec2/associate-client-vpn-target-network.md b/cli/latest/reference/ec2/associate-client-vpn-target-network.md
index 0ba6b0060..6f472b6b0 100644
--- a//cli/latest/reference/ec2/associate-client-vpn-target-network.md
+++ b//cli/latest/reference/ec2/associate-client-vpn-target-network.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
@@ -71 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
-    --subnet-id <value>
+    [--subnet-id <value>]
@@ -73,0 +74,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+    [--availability-zone <value>]
+    [--availability-zone-id <value>]
@@ -103 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
-`--subnet-id` (string) [required]
+`--subnet-id` (string)
@@ -105 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
-> The ID of the subnet to associate with the Client VPN endpoint.
+> The ID of the subnet to associate with the Client VPN endpoint. Required for VPC-based endpoints. For Transit Gateway-based endpoints, use `AvailabilityZone` or `AvailabilityZoneId` instead.
@@ -114,0 +117,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+`--availability-zone` (string)
+
+> The Availability Zone name for the Transit Gateway association. Required if when associating an Availability Zone with a Client VPN endpoint that uses a Transit Gateway. You cannot specify both `SubnetId` and `AvailabilityZone` .
+
+`--availability-zone-id` (string)
+
+> The Availability Zone ID for the Transit Gateway association. Required if when associating an Availability Zone with a Client VPN endpoint that uses a Transit Gateway. You cannot specify both `AvailabilityZone` and `AvailabilityZoneId` .
+
@@ -295 +305 @@ Status -> (structure)
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »