AWS Security ChangesHomeSearch

AWS vpc documentation change

Service: vpc · 2026-04-25 · Documentation low

File: vpc/latest/tgw/create-tgw.md

Summary

Updated documentation to include Client VPN attachments as using transit gateway CIDR blocks for IP assignment

Security assessment

This change expands the documentation to include Client VPN attachments as another use case for transit gateway CIDR blocks. There is no evidence of a security vulnerability being addressed; it's a feature documentation update.

Diff

diff --git a/vpc/latest/tgw/create-tgw.md b/vpc/latest/tgw/create-tgw.md
index 08ab39e4c..137aaa624 100644
--- a//vpc/latest/tgw/create-tgw.md
+++ b//vpc/latest/tgw/create-tgw.md
@@ -63 +63 @@ You can specify a size /24 CIDR block or larger (for example, /23 or /22) for IP
-Transit gateway CIDR blocks are used if you are configuring Connect (GRE) attachments or PrivateIP VPNs. Transit Gateway assigns IPs for the Tunnel endpoints (GRE/PrivateIP VPN) from this range.
+Transit gateway CIDR blocks are used if you are configuring Connect (GRE) attachments, PrivateIP VPNs, or Client VPN attachments. Transit Gateway assigns IPs for the Tunnel endpoints (GRE/PrivateIP VPN) and Client VPN attachments from this range.