AWS vpc documentation change
Summary
Added DNS resolution configuration option during resource gateway creation
Security assessment
Adds configuration for DNS resolution behavior but doesn't address security vulnerabilities. Security groups reference remains unchanged.
Diff
diff --git a/vpc/latest/privatelink/create-resource-gateway.md b/vpc/latest/privatelink/create-resource-gateway.md index a945c3509..7e1693203 100644 --- a//vpc/latest/privatelink/create-resource-gateway.md +++ b//vpc/latest/privatelink/create-resource-gateway.md @@ -31 +31 @@ The default is 16 IPv4 addresses per ENI. This is a suitable number of IPs to fo - 8. Choose up to five security groups to control inbound traffic from the VPC to the service network. + 8. For **Security groups** , choose up to five security groups to control inbound traffic from the VPC to the service network. @@ -33 +33 @@ The default is 16 IPv4 addresses per ENI. This is a suitable number of IPs to fo - 9. (Optional) To add a tag, choose **Add new tag** and enter the tag key and the tag value. + 9. For **Resource Config DNS Resolution** , choose how you want DNS to be resolved for domain-name targets. @@ -35 +35,5 @@ The default is 16 IPv4 addresses per ENI. This is a suitable number of IPs to fo - 10. Choose **Create resource gateway**. + 1. If you are using a private DNS server or your domain-name targets are in a Route53 private hosted zone, set to IN_VPC + + 10. (Optional) To add a tag, choose **Add new tag** and enter the tag key and the tag value. + + 11. Choose **Create resource gateway**.