AWS mwaa documentation change

Service: mwaa · 2026-05-28 · Documentation low

File: mwaa/latest/userguide/vpc-vpe-create-access.md

Summary

Added note about VPC endpoint behavior in new network mode, updated terminology and image references

Security assessment

Clarifies security architecture for new network mode (automatic endpoint management) and updates terminology. Reinforces security practices for no-internet VPCs but doesn't fix vulnerabilities.

Diff

diff --git a/mwaa/latest/userguide/vpc-vpe-create-access.md b/mwaa/latest/userguide/vpc-vpe-create-access.md
index db06c0467..1c6604584 100644
--- a//mwaa/latest/userguide/vpc-vpe-create-access.md
+++ b//mwaa/latest/userguide/vpc-vpe-create-access.md
@@ -12,0 +13,4 @@ An existing Amazon VPC network without internet access needs additional VPC serv
+###### Note
+
+If you chose **Both public and private network access** , the VPC endpoint for the webserver is created and managed automatically by Amazon MWAA. You do not need to create VPC endpoints for Apache Airflow webserver connectivity. However, if your Amazon VPC does not have internet access, you still need VPC endpoints for other AWS services (such as Amazon S3, CloudWatch Logs, SQS, KMS, and Amazon ECR) as described on this page.
+
@@ -45 +49 @@ An existing Amazon VPC network without internet access needs additional VPC serv
-![This image displays the architecture for an Amazon MWAA environment with a private webserver.](/images/mwaa/latest/userguide/images/mwaa-private-web-server.png)
+![This image displays the architecture for an Amazon MWAA environment with Private network access.](/images/mwaa/latest/userguide/images/mwaa-private-web-server.png)
@@ -49 +53 @@ The private network access mode limits access to the Apache Airflow UI to users
-When you create an environment with private webserver access, you must package all of your dependencies in a Python wheel archive (`.whl`), then reference the `.whl` in your `requirements.txt`. For instructions on packaging and installing your dependencies using wheel, refer to [Managing dependencies using Python wheel](./best-practices-dependencies.html#best-practices-dependencies-python-wheels).
+When you create an environment with **Private network** access, you must package all of your dependencies in a Python wheel archive (`.whl`), then reference the `.whl` in your `requirements.txt`. For instructions on packaging and installing your dependencies using wheel, refer to [Managing dependencies using Python wheel](./best-practices-dependencies.html#best-practices-dependencies-python-wheels).
@@ -53 +57 @@ The following image depicts where to find the **Private network** option on the
-![This image depicts where to find the Private network option on the Amazon MWAA console.](/images/mwaa/latest/userguide/images/mwaa-console-private-network.png)
+![This image depicts where to find the Private network option on the Amazon MWAA console.](/images/mwaa/latest/userguide/images/mwaa-console-private-network-2026.png)