AWS vpc: Added NIC.br as supported registry for BGP route protection
Summary
Added NIC.br (Brazil, NIR under LACNIC) to the supported registries table and updated headings/prose to say 'Internet Registries (RIR/NIR)', including a note that automatic CIDR discovery and ROA pre-creation are unavailable for NIC.br.
Security assessment
The change extends documentation for IPAM BGP route protection (RPKI validation, ROA management, route-overlap/hijack detection) to an additional registry, with an explicit coverage limitation; it documents a security feature's scope rather than fixing a specific vulnerability.
Evidence
NIC.br | Brazil | National Internet Registry operating under LACNIC. Automatic CIDR discovery and ROA pre-creation are not available during initial setup.
Diff
diff --git a/vpc/latest/ipam/monitor-bgp-route-security.md b/vpc/latest/ipam/monitor-bgp-route-security.md index b7a720c..a582700 100644 --- a//vpc/latest/ipam/monitor-bgp-route-security.md +++ b//vpc/latest/ipam/monitor-bgp-route-security.md @@ -7 +7 @@ -The problem this solvesHow it worksWhen to use itGetting started optionsTier requirementsSupported Regional Internet RegistriesKey conceptsWhat happens without BGP route protectionConsole visualizationsCommand line +The problem this solvesHow it worksWhen to use itGetting started optionsTier requirementsSupported Internet RegistriesKey conceptsWhat happens without BGP route protectionConsole visualizationsCommand line @@ -11 +11 @@ The problem this solvesHow it worksWhen to use itGetting started optionsTier req -IPAM BGP route protection monitors Resource Public Key Infrastructure (RPKI) validity for all Bring Your Own IP (BYOIP) prefixes across accounts and Regions from a single dashboard, detects route overlaps that may indicate hijacking, and, with delegated RPKI, eliminates manual Route Origin Authorization (ROA) management at ARIN, RIPE, APNIC, and LACNIC. You go from logging into Regional Internet Registry (RIR) portals per-prefix to zero manual ROA operations. +IPAM BGP route protection monitors Resource Public Key Infrastructure (RPKI) validity for all Bring Your Own IP (BYOIP) prefixes across accounts and Regions from a single dashboard, detects route overlaps that may indicate hijacking, and, with delegated RPKI, eliminates manual Route Origin Authorization (ROA) management at ARIN, RIPE, APNIC, LACNIC, and NIC.br. You go from logging into Internet Registry (RIR/NIR) portals per-prefix to zero manual ROA operations. @@ -82 +82 @@ For pricing details, see the IPAM tab on the [Amazon VPC pricing page](https://a -## Supported Regional Internet Registries +## Supported Internet Registries @@ -89,0 +90 @@ LACNIC | Latin America, Caribbean | Delegated RPKI supported. Automatic CIDR dis +NIC.br | Brazil | National Internet Registry operating under LACNIC. Automatic CIDR discovery and ROA pre-creation are not available during initial setup.