AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-07 · Documentation low

File: cli/latest/reference/vpc-lattice/create-resource-gateway.md

Summary

Added new '--resource-config-dns-resolution' parameter with DNS resolution options (IN_VPC or PUBLIC) and corresponding output field documentation

Security assessment

The change documents DNS resolution configuration options that impact network security boundaries (private vs public DNS resolution). While this relates to security design, there's no evidence it addresses a specific vulnerability.

Diff

diff --git a/cli/latest/reference/vpc-lattice/create-resource-gateway.md b/cli/latest/reference/vpc-lattice/create-resource-gateway.md
index d16f8654f..ccf36628e 100644
--- a//cli/latest/reference/vpc-lattice/create-resource-gateway.md
+++ b//cli/latest/reference/vpc-lattice/create-resource-gateway.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »
@@ -74,0 +75 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    [--resource-config-dns-resolution <value>]
@@ -213,0 +215,16 @@ Syntax:
+`--resource-config-dns-resolution` (string)
+
+> Indicates how DNS is resolved for resource configurations associated to this resource gateway. ResourceConfigDnsResolution is set at creation time and cannot be changed.
+> 
+>   * `IN_VPC` \- DNS resolution occurs privately within the resource gateway’s VPC. DNS queries for resources behind this resource gateway resolve using the DNS resolvers defined in the VPC’s DHCP option sets. Use this when your resource domain names are hosted in private Route 53 hosted zones or on-premises DNS servers reachable from the VPC.
+>   * `PUBLIC` \- DNS resolution occurs against public DNS resolvers. DNS queries for resources behind this resource gateway resolve using standard public DNS. Use this when your resource domain names are publicly resolvable.
+> 
+
+> 
+> Possible values:
+> 
+>   * `IN_VPC`
+>   * `PUBLIC`
+> 
+
+
@@ -530,0 +548,11 @@ ipv4AddressesPerEni -> (integer)
+resourceConfigDnsResolution -> (string)
+
+> The DNS resolution type for resource configurations that are associated with this resource gateway.
+> 
+> Possible values:
+> 
+>   * `IN_VPC`
+>   * `PUBLIC`
+> 
+
+
@@ -541 +569 @@ ipv4AddressesPerEni -> (integer)
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »