AWS directoryservice documentation change
Summary
Added IPv6 examples throughout trust setup documentation including security group rules, DNS server IPs, and IP routing configurations.
Security assessment
Changes are IPv6 syntax updates without security implications. No security issues or vulnerabilities are referenced.
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_setup_trust.md b/directoryservice/latest/admin-guide/ms_ad_setup_trust.md index f2a988a47..fb15b5487 100644 --- a//directoryservice/latest/admin-guide/ms_ad_setup_trust.md +++ b//directoryservice/latest/admin-guide/ms_ad_setup_trust.md @@ -67 +67 @@ The selected security group is a security group that is automatically created wh - * **Destination** determines the traffic that can leave your domain controllers and where it can go in your self-managed network. Specify a single IP address or an IP address range in CIDR notation (for example, 203.0.113.5/32). You can also specify the name or ID of another security group in the same Region. For more information, see [Understand your directory's AWS security group configuration and use](./ms_ad_best_practices.html#understandsecuritygroup). + * **Destination** determines the traffic that can leave your domain controllers and where it can go in your self-managed network. Specify a single IP address or an IP address range in CIDR notation (for example, 203.0.113.5/32 for IPv4 or 2001:db8::/32 for IPv6). You can also specify the name or ID of another security group in the same Region. For more information, see [Understand your directory's AWS security group configuration and use](./ms_ad_best_practices.html#understandsecuritygroup). @@ -156 +156 @@ Trust relationships is a global feature of AWS Managed Microsoft AD. If you are - 7. For **Conditional forwarder** , type the IP address of your self-managed DNS server. If you have previously created conditional forwarders, you can type the FQDN of your self-managed domain instead of a DNS IP address. + 7. For **Conditional forwarder** , type the IP address of your self-managed DNS server (for example, 172.16.10.153 for IPv4 or 2001:db8::1 for IPv6). If you have previously created conditional forwarders, you can type the FQDN of your self-managed domain instead of a DNS IP address. @@ -158 +158 @@ Trust relationships is a global feature of AWS Managed Microsoft AD. If you are - 8. (Optional) Choose **Add another IP address** and type the IP address of an additional self-managed DNS server. You can repeat this step for each applicable DNS server address for a total of four addresses. + 8. (Optional) Choose **Add another IP address** and type the IP address of an additional self-managed DNS server. You can repeat this step for each applicable DNS server address for a total of four addresses. Both IPv4 and IPv6 addresses are supported. @@ -162 +162 @@ Trust relationships is a global feature of AWS Managed Microsoft AD. If you are - 10. If the DNS server or the network for your self-managed domain uses a public (non-RFC 1918) IP address space, go to the **IP routing** section, choose **Actions** , and then choose **Add route**. Type the IP address block of your DNS server or self-managed network using CIDR format, for example 203.0.113.0/24. This step is not necessary if both your DNS server and your self-managed network are using RFC 1918 IP address spaces. + 10. If the DNS server or the network for your self-managed domain uses a public (non-RFC 1918) IP address space, go to the **IP routing** section, choose **Actions** , and then choose **Add route**. Type the IP address block of your DNS server or self-managed network using CIDR format, for example 203.0.113.0/24 for IPv4 or 2001:db8::/32 for IPv6. This step is not necessary if both your DNS server and your self-managed network are using RFC 1918 IP address spaces.