AWS cli medium security documentation change
Summary
Added IAM permissions requirements note for VPC peering operations and updated CLI version
Security assessment
Added explicit documentation about required EC2 permissions (ec2:AuthorizeSecurityGroupEgress/Ingress etc.) which directly relates to security configuration. This addresses potential misconfiguration risks in VPC peering setups.
Diff
diff --git a/cli/latest/reference/gamelift/create-vpc-peering-connection.md b/cli/latest/reference/gamelift/create-vpc-peering-connection.md index 35f0ca4d4..a6563b23b 100644 --- a//cli/latest/reference/gamelift/create-vpc-peering-connection.md +++ b//cli/latest/reference/gamelift/create-vpc-peering-connection.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -67 +67,10 @@ To establish the connection, call this operation from the Amazon Web Services ac -> **Related actions** +### Note + +> Amazon GameLift Servers uses the caller’s credentials to update peer-VPC resources. The IAM user that calls this operation must have the following Amazon EC2 permissions enabled: +> +> * `ec2:AcceptVpcPeeringConnection` +> * `ec2:AuthorizeSecurityGroupEgress` +> * `ec2:AuthorizeSecurityGroupIngress` +> * `ec2:CreateRoute` +> * `ec2:DescribeRouteTables` +> * `ec2:DescribeSecurityGroups` @@ -69 +78,5 @@ To establish the connection, call this operation from the Amazon Web Services ac -> [All APIs by task](https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-awssdk.html#reference-awssdk-resources-fleets) + + +**Related actions** + +[All APIs by task](https://docs.aws.amazon.com/gamelift/latest/developerguide/reference-awssdk.html#reference-awssdk-resources-fleets) @@ -264 +277 @@ None - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »