AWS network-firewall documentation change
Summary
Added three changelog entries: new chapter on container associations, service quotas for container associations, and IAM policy update for container lifecycle monitoring.
Security assessment
Documents new feature rollout (container associations) without evidence of security fixes. Policy update enables functionality but doesn't address vulnerabilities.
Diff
diff --git a/network-firewall/latest/developerguide/document-history.md b/network-firewall/latest/developerguide/document-history.md index 146b3ed3d..c8186cdf3 100644 --- a//network-firewall/latest/developerguide/document-history.md +++ b//network-firewall/latest/developerguide/document-history.md @@ -14,0 +15,3 @@ Change| Description| Date +[New chapter on container associations](./container-associations.html)| Network Firewall now supports container associations for dynamically tracking container IP addresses from Amazon ECS and Amazon EKS clusters.| June 30, 2026 +[Added service quotas for container associations](./quotas.html)| Container associations have an adjustable quota of 100 per account per Region. Immutable quotas include 5 monitoring configurations per container association and 30 container association references per rule group.| June 30, 2026 +[AWS managed policy updates — Update to an existing policy](./security-iam-awsmanpol.html#security-iam-awsmanpol-updates)| Updated `AWSNetworkFirewallServiceRolePolicy` to support monitoring container lifecycle events for container associations.| June 30, 2026