AWS cli medium security documentation change
Summary
Added IAM permissions requirements note for VPC peering operations and updated CLI version
Security assessment
Added explicit documentation about required EC2 permissions (ec2:AuthorizeSecurityGroupEgress/Ingress etc.) which directly relates to security configuration. This addresses potential misconfiguration risks in VPC peering setups.
Diff
diff --git a/cli/latest/reference/gamelift/create-vpc-peering-authorization.md b/cli/latest/reference/gamelift/create-vpc-peering-authorization.md index bf4f60acc..04f072705 100644 --- a//cli/latest/reference/gamelift/create-vpc-peering-authorization.md +++ b//cli/latest/reference/gamelift/create-vpc-peering-authorization.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -71 +71,10 @@ The authorization remains valid for 24 hours unless it is canceled. You must cre -> **Related actions** +### Note + +> Amazon GameLift Servers uses the caller’s credentials to update peer-VPC resources. The IAM user that calls this operation must have the following Amazon EC2 permissions enabled: +> +> * `ec2:AcceptVpcPeeringConnection` +> * `ec2:AuthorizeSecurityGroupEgress` +> * `ec2:AuthorizeSecurityGroupIngress` +> * `ec2:CreateRoute` +> * `ec2:DescribeRouteTables` +> * `ec2:DescribeSecurityGroups` @@ -73 +82,5 @@ The authorization remains valid for 24 hours unless it is canceled. You must cre -> [All APIs by task](https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-awssdk.html#reference-awssdk-resources-fleets) + + +**Related actions** + +[All APIs by task](https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-awssdk.html#reference-awssdk-resources-fleets) @@ -298 +311 @@ VpcPeeringAuthorization -> (structure) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »