AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2026-07-10 · Documentation low

File: prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md

Summary

Updated navigation link, image path, and minor text formatting for traffic flow description

Security assessment

Changes involve image updates and grammatical tweaks ('the Appliance VPC'). The core security inspection workflow remains unmodified with no new security vulnerabilities or features documented.

Diff

diff --git a/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md b/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md
index 0d80235ef..dcb7ad272 100644
--- a//prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md
+++ b//prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md
@@ -5 +5 @@
-[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Implementing inline traffic inspection using third-party security appliances](welcome.html)
+[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Implementing inline traffic inspection using third-party security appliances](introduction.html)
@@ -11,3 +11 @@ VPC-to-VPC traffic inspection occurs when traffic originates from one VPC and is
-![Architecture diagram of traffic inspection between two spoke VPCs and an appliance VPC](/images/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/images/2-vpc-to-vpc.png)
-
-In this use case, two spoke VPCs host the workload EC2 instances across two Availability Zones and an appliance VPC hosts the third-party firewall appliances for traffic inspection. The VPCs are interconnected using AWS Transit Gateway. The diagram shows the following packet flow when an EC2 instance in `Workload spoke VPC1` in Availability Zone 1 sends a packet to an instance in `Workload spoke VPC2` in Availability Zone 1:
+![Architecture diagram of traffic inspection between two spoke VPCs and an appliance VPC](/images/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/images/guide-img/7951faf9-5db9-4729-86ff-47c734d59b19/images/8656b746-f214-4329-8b26-de61ead6f3a5.png)
@@ -31 +29 @@ In this use case, two spoke VPCs host the workload EC2 instances across two Avai
-  9. After the packet is successfully inspected, the packet is sent back to the Gateway Load Balancer and then to Gateway Load Balancer endpoint in `Appliance VPC` in Availability Zone 1.
+  9. After the packet is successfully inspected, the packet is sent back to the Gateway Load Balancer and then to Gateway Load Balancer endpoint in the `Appliance VPC` in Availability Zone 1.