AWS glue documentation change
Summary
Added new 'glue.sessions' VPC endpoint for Spark Connect and clarified DNS routing behavior
Security assessment
Documents network security feature (private connectivity for Spark Connect) but lacks evidence of vulnerability remediation. Enhances security posture without fixing specific issues.
Diff
diff --git a/glue/latest/dg/vpc-interface-endpoints.md b/glue/latest/dg/vpc-interface-endpoints.md index 061ba356e..89972f777 100644 --- a//glue/latest/dg/vpc-interface-endpoints.md +++ b//glue/latest/dg/vpc-interface-endpoints.md @@ -27 +27 @@ You can create a VPC endpoint for the AWS Glue service using either the Amazon V -Create a VPC endpoint for AWS Glue using the following service name: +Create a VPC endpoint for AWS Glue using the following service names: @@ -29 +29 @@ Create a VPC endpoint for AWS Glue using the following service name: - * com.amazonaws.`region`.glue + * `com.amazonaws.`region`.glue` – Use this endpoint for AWS Glue API operations such as `CreateSession`, `GetSession`, and `GetSessionEndpoint`. @@ -30,0 +31 @@ Create a VPC endpoint for AWS Glue using the following service name: + * `com.amazonaws.`region`.glue.sessions` – Use this endpoint for Spark Connect gRPC traffic to interactive session workers. This endpoint is required when using Spark Connect sessions from within a VPC without internet access. @@ -34 +35,2 @@ Create a VPC endpoint for AWS Glue using the following service name: -If you enable private DNS for the endpoint, you can make API requests to AWS Glue using its default DNS name for the Region, for example, `glue.us-east-1.amazonaws.com`. + +If you enable private DNS for the `glue` endpoint, you can make API requests to AWS Glue using its default DNS name for the Region, for example, `glue.us-east-1.amazonaws.com`. If you enable private DNS for the `glue.sessions` endpoint, Spark Connect session traffic automatically routes through the VPC endpoint.