AWS cli medium security documentation change

Service: cli · 2026-06-10 · Security-related medium

File: cli/latest/reference/devops-agent/create-private-connection.md

Summary

Added DNS resolution configuration (PUBLIC/IN_VPC), failure message field, and updated syntax

Security assessment

Added DNS resolution mode controls network exposure (IN_VPC keeps DNS queries within private network), reducing attack surface

Diff

diff --git a/cli/latest/reference/devops-agent/create-private-connection.md b/cli/latest/reference/devops-agent/create-private-connection.md
index 91ebe835c..48d93f387 100644
--- a//cli/latest/reference/devops-agent/create-private-connection.md
+++ b//cli/latest/reference/devops-agent/create-private-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.1 Command Reference](../../index.html) »
@@ -243,0 +244,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/devops
+>> 
+>> dnsResolution -> (string)
+>>
+>>> DNS resolution mode for the resource gateway. Defaults to PUBLIC when not set.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `PUBLIC`
+>>>   * `IN_VPC`
+>>> 
+
@@ -275 +286 @@ Shorthand Syntax:
-    serviceManaged={hostAddress=string,vpcId=string,subnetIds=[string,string],securityGroupIds=[string,string],ipAddressType=string,ipv4AddressesPerEni=integer,portRanges=[string,string],certificate=string},selfManaged={resourceConfigurationId=string,certificate=string}
+    serviceManaged={hostAddress=string,vpcId=string,subnetIds=[string,string],securityGroupIds=[string,string],ipAddressType=string,ipv4AddressesPerEni=integer,portRanges=[string,string],certificate=string,dnsResolution=string},selfManaged={resourceConfigurationId=string,certificate=string}
@@ -290 +301,2 @@ JSON Syntax:
-        "certificate": "string"
+        "certificate": "string",
+        "dnsResolution": "PUBLIC"|"IN_VPC"
@@ -541,0 +554,22 @@ certificateExpiryTime -> (timestamp)
+dnsResolution -> (string)
+
+> DNS resolution mode for the Private Connection’s resource gateway.
+> 
+> Possible values:
+> 
+>   * `PUBLIC`
+>   * `IN_VPC`
+> 
+
+
+failureMessage -> (string)
+
+> Message describing the reason for a failed Private Connection creation, if applicable.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `1000`
+> 
+
+
@@ -580 +614 @@ tags -> (map)
-  * [AWS CLI 2.34.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.1 Command Reference](../../index.html) »