AWS prescriptive-guidance documentation change
Summary
Updated navigation link, image path, and minor text formatting for traffic flow description
Security assessment
Changes involve image updates and grammatical tweaks ('the Appliance VPC'). The core security inspection workflow remains unmodified with no new security vulnerabilities or features documented.
Diff
diff --git a/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md b/prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md index 0d80235ef..dcb7ad272 100644 --- a//prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md +++ b//prescriptive-guidance/latest/inline-traffic-inspection-third-party-appliances/vpc-to-vpc-traffic-inspection.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Implementing inline traffic inspection using third-party security appliances](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Implementing inline traffic inspection using third-party security appliances](introduction.html) @@ -11,3 +11 @@ VPC-to-VPC traffic inspection occurs when traffic originates from one VPC and is - - -In this use case, two spoke VPCs host the workload EC2 instances across two Availability Zones and an appliance VPC hosts the third-party firewall appliances for traffic inspection. The VPCs are interconnected using AWS Transit Gateway. The diagram shows the following packet flow when an EC2 instance in `Workload spoke VPC1` in Availability Zone 1 sends a packet to an instance in `Workload spoke VPC2` in Availability Zone 1: + @@ -31 +29 @@ In this use case, two spoke VPCs host the workload EC2 instances across two Avai - 9. After the packet is successfully inspected, the packet is sent back to the Gateway Load Balancer and then to Gateway Load Balancer endpoint in `Appliance VPC` in Availability Zone 1. + 9. After the packet is successfully inspected, the packet is sent back to the Gateway Load Balancer and then to Gateway Load Balancer endpoint in the `Appliance VPC` in Availability Zone 1.