AWS AmazonECS documentation change
Summary
Added KMS encryption configuration options for managed storage and Fargate ephemeral storage
Security assessment
Introduces documentation about encrypting storage with KMS keys, which is a security feature, but does not indicate remediation of a specific vulnerability
Diff
diff --git a/AmazonECS/latest/developerguide/create-cluster-console-v2.md b/AmazonECS/latest/developerguide/create-cluster-console-v2.md index b6277cf96..178ccf020 100644 --- a//AmazonECS/latest/developerguide/create-cluster-console-v2.md +++ b//AmazonECS/latest/developerguide/create-cluster-console-v2.md @@ -15 +15 @@ The console automatically associates the Fargate and Fargate Spot capacity provi -In addition to the cluster, the console automatically creates the following resources: +You can modify the following options: @@ -19,8 +19 @@ In addition to the cluster, the console automatically creates the following reso -A namespace allows services that you create in the cluster can connect to the other services in the namespace without additional configuration. The default namespace is the same as the cluster name. For more information, see [Interconnect Amazon ECS services](./interconnecting-services.html). - - - - -You can modify the following options: - - * Change the default namespace associated with the cluster. +A namespace allows services that you create in the cluster can connect to the other services in the namespace without additional configuration. For more information, see [Interconnect Amazon ECS services](./interconnecting-services.html). @@ -37,0 +31,4 @@ We recommend that you use Container Insights with enhanced observability instead + * Assign a AWS KMS key for your managed storage. For information about how to create a key, see [Create a KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) in the _AWS Key Management Service User Guide_. + + * Assign a AWS KMS key for your Fargate ephemeral storage. For information about how to create a key, see [Create a KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) in the _AWS Key Management Service User Guide_. + @@ -67 +64,5 @@ The name can contain up to 255 letters (uppercase and lowercase), numbers, and h - 7. (Optional) Encrypt your data on Fargate ephemeral storage. Under **Encryption** , for **Fargate ephemeral storage** , enter the ARN of the AWS KMS key you want to use to encrypt the Fargate ephemeral storage data. + 7. (Optional), Under **Encryption** , you can configure the following: + + * Encrypt your data on Fargate ephemeral storage. Under **Encryption** , for **Fargate ephemeral storage** , enter the ARN of the AWS KMS key you want to use to encrypt the Fargate ephemeral storage data. + + * Encrypt the data on managed storage. Under **Encryption** , for **Managed storage** , enter the ARN of the AWS KMS key you want to use to encrypt the managed storage data.