AWS vpc documentation change

Service: vpc · 2026-07-07 · Documentation medium

File: vpc/latest/tgw/tgw-vpc-attachments.md

Summary

Added IPv6 support documentation for VPC attachments including addressing behavior and route propagation

Security assessment

Documentation explains IPv6 functionality without addressing security vulnerabilities. Note explicitly states it doesn't filter packets, indicating this is a feature enhancement rather than security fix.

Diff

diff --git a/vpc/latest/tgw/tgw-vpc-attachments.md b/vpc/latest/tgw/tgw-vpc-attachments.md
index 3abf092f3..e2fabcc17 100644
--- a//vpc/latest/tgw/tgw-vpc-attachments.md
+++ b//vpc/latest/tgw/tgw-vpc-attachments.md
@@ -7 +7 @@
-Route table requirements for VPC attachmentsVPC attachment lifecycleAppliance modeSecurity group referencing
+Route table requirements for VPC attachmentsVPC attachment lifecycleAppliance modeSecurity group referencingIPv6 support
@@ -163,0 +164,24 @@ The following limitations apply when using security group referencing with a VPC
+## IPv6 support
+
+When you create or modify a VPC attachment, you can enable or disable IPv6 support. The default value is `disable`.
+
+Enabling IPv6 support does the following:
+
+  * Assigns an IPv6 address to the transit gateway network interface in the attachment subnet. The transit gateway uses this address to send and receive IPv6 traffic through the attachment.
+
+  * Propagates IPv6 VPC CIDRs to the transit gateway route table when route propagation is configured.
+
+
+
+
+When you disable IPv6 support, the following behaviors still apply:
+
+  * You can still create static IPv6 routes that target the attachment.
+
+  * IPv6 traffic can still enter the transit gateway from the VPC if the VPC route table has an IPv6 route that points to the transit gateway, and network ACLs and security groups permit the traffic.
+
+
+
+
+This setting controls only network interface addressing and route propagation—it does not filter packets.
+