AWS mwaa documentation change
Summary
Added new 'Both public and private network access' option for Apache Airflow v3.2.1+ environments
Security assessment
This change documents a new network access mode that enhances security by allowing public UI access while maintaining private worker-webserver communication. It doesn't fix a vulnerability but provides a security configuration option.
Diff
diff --git a/mwaa/latest/userguide/create-environment.md b/mwaa/latest/userguide/create-environment.md index 139971447..ce90a7dc8 100644 --- a//mwaa/latest/userguide/create-environment.md +++ b//mwaa/latest/userguide/create-environment.md @@ -135,0 +136,2 @@ Choose the **Private network** option if your Apache Airflow UI is only accessed + 3. **Both public and private network access**. Available for Apache Airflow version 3.2.1 and later. This allows the Apache Airflow UI to be accessed over the internet, while workers communicate with the webserver through a private VPC endpoint. Choose this option if the Amazon VPC hosting your environment lacks internet access. +