AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-19 · Documentation low

File: cli/latest/reference/directconnect/create-transit-virtual-interface.md

Summary

Updated documentation for create-transit-virtual-interface command: 1) Added new 'rateLimit' parameter for bandwidth allocation 2) Enhanced ASN parameter documentation with clearer 2-byte/4-byte ASN handling details 3) Updated AWS CLI version references

Security assessment

The change adds documentation for the new 'rateLimit' parameter which enables bandwidth control - a security feature that helps prevent resource exhaustion attacks. However, there's no evidence of a specific security vulnerability being addressed. The ASN documentation improvements clarify usage but don't indicate security fixes.

Diff

diff --git a/cli/latest/reference/directconnect/create-transit-virtual-interface.md b/cli/latest/reference/directconnect/create-transit-virtual-interface.md
index 04a514a59..00f9adb6c 100644
--- a//cli/latest/reference/directconnect/create-transit-virtual-interface.md
+++ b//cli/latest/reference/directconnect/create-transit-virtual-interface.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -121,5 +121 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/direct
->> ### Note
->> 
->> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->> 
->>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
@@ -126,0 +123,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/direct
+>>   * If you enter a 4-byte ASN for the `asn` parameter, the API returns an error.
+>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -134 +132 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/direct
->> ### Note
+>> Note the following limitations when using `asnLong` :
@@ -136,3 +134,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/direct
->> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->> 
->>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
+>>   * `asnLong` accepts any valid ASN value, regardless if it’s 2-byte or 4-byte.
+>>   * When using a 4-byte `asnLong` , the API response returns `0` for the legacy `asn` attribute since 4-byte ASN values exceed the maximum supported value of 2,147,483,647.
+>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -214,0 +214,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/direct
+> 
+> rateLimit -> (string)
+>
+>> The rate limit (bandwidth allocation) to apply to the virtual interface. The rate limit restricts the maximum bandwidth that the virtual interface can use on the parent connection.
@@ -219 +222 @@ Shorthand Syntax:
-    virtualInterfaceName=string,vlan=integer,asn=integer,asnLong=long,mtu=integer,authKey=string,amazonAddress=string,customerAddress=string,addressFamily=string,directConnectGatewayId=string,tags=[{key=string,value=string},{key=string,value=string}],enableSiteLink=boolean
+    virtualInterfaceName=string,vlan=integer,asn=integer,asnLong=long,mtu=integer,authKey=string,amazonAddress=string,customerAddress=string,addressFamily=string,directConnectGatewayId=string,tags=[{key=string,value=string},{key=string,value=string}],enableSiteLink=boolean,rateLimit=string
@@ -243 +246,2 @@ JSON Syntax:
-      "enableSiteLink": true|false
+      "enableSiteLink": true|false,
+      "rateLimit": "string"
@@ -466,5 +470 @@ virtualInterface -> (structure)
->> ### Note
->> 
->> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->> 
->>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
@@ -471,0 +472,2 @@ virtualInterface -> (structure)
+>>   * If you enter a 4-byte ASN for the `asn` parameter, the API returns an error.
+>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -479 +481 @@ virtualInterface -> (structure)
->> ### Note
+>> Note the following limitations when using `asnLong` :
@@ -481,3 +483,4 @@ virtualInterface -> (structure)
->> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->> 
->>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
+>>   * `asnLong` accepts any valid ASN value, regardless if it’s 2-byte or 4-byte.
+>>   * When using a 4-byte `asnLong` , the API response returns `0` for the legacy `asn` attribute since 4-byte ASN values exceed the maximum supported value of 2,147,483,647.
+>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -595,5 +598 @@ virtualInterface -> (structure)
->>>> ### Note
->>>> 
->>>> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->>>> 
->>>>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
@@ -600,0 +600,2 @@ virtualInterface -> (structure)
+>>>>   * If you enter a 4-byte ASN for the `asn` parameter, the API returns an error.
+>>>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -608 +609 @@ virtualInterface -> (structure)
->>>> ### Note
+>>>> Note the following limitations when using `asnLong` :
@@ -610,3 +611,4 @@ virtualInterface -> (structure)
->>>> You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
->>>> 
->>>>   * The `asnLong` attribute accepts both ASN and long ASN ranges.
+>>>>   * You can use `asnLong` or `asn` , but not both. We recommend using `asnLong` as it supports a greater pool of numbers.
+>>>>   * `asnLong` accepts any valid ASN value, regardless if it’s 2-byte or 4-byte.
+>>>>   * When using a 4-byte `asnLong` , the API response returns `0` for the legacy `asn` attribute since 4-byte ASN values exceed the maximum supported value of 2,147,483,647.
+>>>>   * If you are using a 2-byte ASN, the API response will include the 2-byte value for both the `asn` and `asnLong` fields.
@@ -740,0 +743,4 @@ virtualInterface -> (structure)
+> 
+> rateLimit -> (string)
+>
+>> The rate limit (bandwidth allocation) applied to the virtual interface. The possible values are `50 Mbps` , `100 Mbps` , `200 Mbps` , `300 Mbps` , `400 Mbps` , `500 Mbps` , `1 Gbps` , `2 Gbps` , `5 Gbps` , or `10 Gbps` .
@@ -752 +758 @@ virtualInterface -> (structure)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »