AWS prescriptive-guidance documentation change
Summary
Updated documentation formatting, fixed markdown table syntax, corrected link references, and simplified section headers. Removed angle bracket note formatting and standardized endpoint table presentation.
Security assessment
Changes are purely cosmetic and structural (formatting, link updates, table syntax). No vulnerabilities, security weaknesses, or incident responses are mentioned. Endpoint information remains functionally identical without security content additions.
Diff
diff --git a/prescriptive-guidance/latest/endpoints-for-iot-sitewise-edge-gateways/required-endpoints.md b/prescriptive-guidance/latest/endpoints-for-iot-sitewise-edge-gateways/required-endpoints.md index 42b0e44e9..cb37c8b27 100644 --- a//prescriptive-guidance/latest/endpoints-for-iot-sitewise-edge-gateways/required-endpoints.md +++ b//prescriptive-guidance/latest/endpoints-for-iot-sitewise-edge-gateways/required-endpoints.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Required endpoints for AWS IoT SiteWise Edge gateways](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Required endpoints for AWS IoT SiteWise Edge gateways](introduction.html) @@ -9 +9 @@ IAM endpointAWS IoT Core endpointsAWS IoT Greengrass V2 endpointsAWS IoT SiteWis -# Required service endpoints for AWS IoT SiteWise Edge gateways +# Required service endpoints @@ -36,3 +36,2 @@ Unless noted as _optional_ , the endpoints in this section are required by the A -###### Note - -Values that need to be customized for your deployment configuration are in angle brackets (`<>`). For a complete list of AWS Regions, see [AWS Regions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html#Concepts.RegionsAndAvailabilityZones.Regions) in _AWS General Reference_. +Note: Values that need to be customized for your deployment configuration are in angle brackets (`<>`). For a complete list of AWS Regions, see [AWS Regions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html#Concepts.RegionsAndAvailabilityZones.Regions) in _AWS General Reference_. +--- @@ -46 +45 @@ Destination endpoint | Port | Protocol | Direction | Description -`iam.amazonaws.com` | 443 | TCP | Outbound | Edge device to IAM +iam.amazonaws.com| 443| TCP| Outbound| Edge device to IAM @@ -50 +49 @@ Destination endpoint | Port | Protocol | Direction | Description -The following are the service endpoints for AWS IoT Core. For more information, see [AWS IoT Core endpoints](https://docs.aws.amazon.com/general/latest/gr/iot-core.html). In this table, ``prefix`` is your account-specific prefix for [AWS IoT Device Management - jobs data endpoints](https://docs.aws.amazon.com/general/latest/gr/iot-core.html#iot-core-jobs-data-plane-endpoints) (AWS IoT Core documentation). +The following are the service endpoints for AWS IoT Core. For more information, see [AWS IoT Core endpoints](https://docs.aws.amazon.com/general/latest/gr/iot-core.html). In this table, `prefix` is your account-specific prefix for [AWS IoT Device Management - jobs data endpoints](https://docs.aws.amazon.com/general/latest/gr/iot-core.html#iot-core-jobs-data-plane-endpoints) (AWS IoT Core documentation). @@ -54,3 +53,3 @@ Destination endpoint | Port | Protocol | Direction | AWS CLI commands | Descript -``<prefix-ats>`.iot.`<region>`.amazonaws.com` | 443 | TCP | Outbound | `aws iot describe-endpoint --endpoint-type iot:Data-ATS` | Edge device to the account-specific AWS IoT data plane -``<prefix>`.credentials.iot.`<region>`.amazonaws.com` | 443 | TCP | Outbound | `aws iot describe-endpoint --endpoint-type iot:CredentialProvider` | Edge device to authenticate AWS IoT Core calls by using a built-in [X.509 client certificate](https://docs.aws.amazon.com/iot/latest/developerguide/x509-client-certs.html) -``<prefix>`.jobs.iot.`<region>`.amazonaws.com` | 443 | TCP | Outbound | `aws iot describe-endpoint --endpoint-type iot:Jobs` | Edge device to the AWS IoT Core control plane +`<prefix-ats>`.iot.`<region>`.amazonaws.com| 443| TCP| Outbound| `aws iot describe-endpoint --endpoint-type iot:Data-ATS`| Edge device to the account-specific AWS IoT data plane +`<prefix>`.credentials.iot.`<region>`.amazonaws.com| 443| TCP| Outbound| `aws iot describe-endpoint --endpoint-type iot:CredentialProvider`| Edge device to authenticate AWS IoT Core calls by using a built-in [X.509 client certificate](https://docs.aws.amazon.com/iot/latest/developerguide/x509-client-certs.html) +`<prefix>`.jobs.iot.`<region>`.amazonaws.com| 443| TCP| Outbound| `aws iot describe-endpoint --endpoint-type iot:Jobs`| Edge device to the AWS IoT Core control plane @@ -64,2 +63,2 @@ Destination endpoint | Port | Protocol | Direction | Description -`greengrass.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT Greengrass V2 control plane -`greengrass-ats.iot.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT Greengrass data plane +greengrass.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT Greengrass V2 control plane +greengrass-ats.iot.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT Greengrass data plane @@ -73,5 +72,5 @@ Destination endpoint | Port | Protocol | Direction | Description -`data.iotsitewise.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT SiteWise data plane -`iotsitewise.`<region>`.amazonaws.com` | 443 | TCP | Outbound | (Optional) Edge device to the AWS IoT SiteWise service plane -`api.iotsitewise.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT SiteWise control plane -`model.iotsitewise.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT SiteWise model control plane -`edge.iotsitewise.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to the AWS IoT SiteWise edge API operations +data.iotsitewise.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT SiteWise data plane +iotsitewise.`<region>`.amazonaws.com| 443| TCP| Outbound| (Optional) Edge device to the AWS IoT SiteWise service plane +api.iotsitewise.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT SiteWise control plane +model.iotsitewise.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT SiteWise model control plane +edge.iotsitewise.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to the AWS IoT SiteWise edge API operations @@ -85 +84 @@ Destination endpoint | Port | Protocol | Direction | Description -`kms.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to AWS KMS +kms.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to AWS KMS @@ -93 +92 @@ Destination endpoint | Port | Protocol | Direction | Description -`secretsmanager.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to Secrets Manager +secretsmanager.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to Secrets Manager @@ -101 +100 @@ Destination endpoint | Port | Protocol | Direction | Description -`sts.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to AWS STS +sts.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to AWS STS @@ -109,3 +108,3 @@ Destination endpoint | Port | Protocol | Direction | Description -`s3.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to all S3 buckets in the AWS Region -`*.s3.amazonaws.com` | 443 | TCP | Outbound | Edge device to any S3 bucket for downloading all AWS IoT Greengrass V2 [components](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-components.html), including AWS provided components -`*.s3.`<region>`.amazonaws.com` | 443 | TCP | Outbound | (Optional) Edge device to any S3 bucket in the AWS Region for downloading all AWS IoT Greengrass V2 [components](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-components.html), including AWS provided components +s3.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to all S3 buckets in the AWS Region +*.s3.amazonaws.com| 443| TCP| Outbound| Edge device to any S3 bucket for downloading all AWS IoT Greengrass V2 [components](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-components.html), including AWS provided components +*.s3.`<region>`.amazonaws.com| 443| TCP| Outbound| (Optional) Edge device to any S3 bucket in the AWS Region for downloading all AWS IoT Greengrass V2 [components](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-components.html), including AWS provided components @@ -115 +114 @@ Destination endpoint | Port | Protocol | Direction | Description -The following are the service endpoints for AWS Systems Manager. For more information, see [Systems Manager endpoints](https://docs.aws.amazon.com/general/latest/gr/ssm.html). +The following are the service endpoints for AWS Systems Manager. For more information, see [AWS Systems Manager endpoints](https://docs.aws.amazon.com/general/latest/gr/ssm.html). @@ -119,2 +118,2 @@ Destination endpoint | Port | Protocol | Direction | Description -`ssm.`<region>`.amazonaws.com` | 443 | TCP | Outbound | Edge device to Systems Manager -`ssmmessages.`<region>`.amazonaws.com` | 443 | TCP | Outbound | (Optional) Edge device to Session Manager +ssm.`<region>`.amazonaws.com| 443| TCP| Outbound| Edge device to Systems Manager +ssmmessages.`<region>`.amazonaws.com| 443| TCP| Outbound| (Optional) Edge device to Session Manager