AWS AmazonECS documentation change
Summary
Added optional step to encrypt Fargate ephemeral storage using AWS KMS during cluster creation
Security assessment
Documentation now includes encryption configuration for Fargate storage, enhancing security guidance. No explicit security issue is mentioned.
Diff
diff --git a/AmazonECS/latest/developerguide/create-cluster-console-v2.md index 3b7167847..373b93d67 100644 --- a/AmazonECS/latest/developerguide/create-cluster-console-v2.md +++ b/AmazonECS/latest/developerguide/create-cluster-console-v2.md @@ -67 +67,3 @@ The name can contain up to 255 letters (uppercase and lowercase), numbers, and h - 7. (Optional) To help identify your cluster, expand **Tags** , and then configure your tags. + 7. (Optional) Encrypt your data on Fargate ephemeral storage. Under **Encryption** , for **Fargate ephemeral storage** , enter the ARN of the AWS KMS key you want to use to encrypt the Fargate ephemeral storage data. + + 8. (Optional) To help identify your cluster, expand **Tags** , and then configure your tags. @@ -77 +79 @@ The name can contain up to 255 letters (uppercase and lowercase), numbers, and h - 8. Choose **Create**. + 9. Choose **Create**.