AWS AWSCloudFormation documentation change
Summary
Added detailed documentation for ResourceConfigDnsResolution property explaining IN_VPC and PUBLIC resolution options
Security assessment
The change documents DNS resolution security features (private vs public DNS) which helps users understand security implications of resource exposure. It explicitly describes how IN_VPC keeps DNS queries private within the VPC.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourcegateway.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourcegateway.md index a7c0513de..58e005485 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourcegateway.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-vpclattice-resourcegateway.md @@ -99 +99,8 @@ _Minimum_ : `3` -Property description not available. +Indicates how DNS is resolved for resource configurations associated with this resource gateway. ResourceConfigDnsResolution is set at creation time and updates require replacement. The default is `PUBLIC` + + * `IN_VPC` \- DNS resolution occurs privately within the resource gateway's VPC. DNS queries for resources behind this resource gateway resolve using the DNS resolvers defined in the VPC's DHCP option sets. Use this when your resource domain names are hosted in private Route 53 hosted zones or on-premises DNS servers reachable from the VPC. + + * `PUBLIC` \- DNS resolution occurs against public DNS resolvers. DNS queries for resources behind this resource gateway resolve using standard public DNS. Use this when your resource domain names are publicly resolvable. + + +