AWS AmazonECS documentation change
Summary
Added documentation for 'defaultLogDriverMode' account setting, explaining blocking vs non-blocking log delivery modes and configuration instructions
Security assessment
The change documents operational logging configuration options but does not address vulnerabilities or security incidents. While logging can be security-relevant, there's no evidence this change responds to a specific security issue.
Diff
diff --git a/AmazonECS/latest/developerguide/ecs-account-settings.md b/AmazonECS/latest/developerguide/ecs-account-settings.md index 797809204..35a1930cd 100644 --- a//AmazonECS/latest/developerguide/ecs-account-settings.md +++ b//AmazonECS/latest/developerguide/ecs-account-settings.md @@ -5 +5 @@ -Amazon Resource Names (ARNs) and IDsARN and resource ID format timelineContainer InsightsAWS Fargate Federal Information Processing Standard (FIPS-140) complianceTagging authorizationTagging authorization timelineAWS Fargate task retirement wait timeIncrease Linux container instance network interfacesRuntime Monitoring (Amazon GuardDuty integration) Dual stack IPv6 VPC +Amazon Resource Names (ARNs) and IDsARN and resource ID format timelineContainer InsightsAWS Fargate Federal Information Processing Standard (FIPS-140) complianceTagging authorizationTagging authorization timelineAWS Fargate task retirement wait timeIncrease Linux container instance network interfacesRuntime Monitoring (Amazon GuardDuty integration) Dual stack IPv6 VPCDefault log driver mode @@ -37,0 +38 @@ Resource name | Learn more +`defaultLogDriverMode` | Default log driver mode @@ -333,0 +335,19 @@ The default is `disabled`. +## Default log driver mode + +Amazon ECS supports setting a default delivery mode of log messages from a container to the chosen log driver. The delivery mode affects application stability when the flow of logs from the container to the log driver is interrupted. + +The `defaultLogDriverMode` setting supports two values: `blocking` and `non-blocking`. For more information about these delivery modes, see [LogConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html) in the _Amazon Elastic Container Service API Reference_. + +If you don't specify a delivery mode in your container definition's `logConfiguration`, the mode you specify using this account setting will be used as the default. + +###### Important + +The `defaultLogDriverMode` account setting can only be changed using either the Amazon ECS API or the AWS CLI. For more information, see [Modifying Amazon ECS account settings](./ecs-modifying-longer-id-settings.html). + +The default delivery mode is `blocking`. + +To set a default log driver mode to `non-blocking`, you can run the following command. + + + aws ecs put-account-setting-default --name defaultLogDriverMode --value "non-blocking" +