AWS AmazonECS documentation change
Summary
Added documentation about specifying volumeInitializationRate when using snapshots to create EBS volumes, with links to related guides
Security assessment
The change introduces a configuration parameter for volume initialization speed but does not address security vulnerabilities or weaknesses. Encryption with KMS keys was already documented.
Diff
diff --git a/AmazonECS/latest/developerguide/ebs-volumes.md b/AmazonECS/latest/developerguide/ebs-volumes.md index cfa86bca5..6cb7c490b 100644 --- a//AmazonECS/latest/developerguide/ebs-volumes.md +++ b//AmazonECS/latest/developerguide/ebs-volumes.md @@ -15 +15 @@ By providing volume configuration at launch time rather than in the task definit -Amazon EBS volumes that are attached to Amazon ECS tasks are managed by Amazon ECS on your behalf. The volumes can be encrypted with AWS Key Management Service (AWS KMS) keys to protect your data. You can either configure new, empty volumes for attachment, or you can use snapshots to load data from existing volumes. +Amazon EBS volumes that are attached to Amazon ECS tasks are managed by Amazon ECS on your behalf. The volumes can be encrypted with AWS Key Management Service (AWS KMS) keys to protect your data. You can either configure new, empty volumes for attachment, or you can use snapshots to load data from existing volumes. When you use snapshots to configure volumes, you can specify a `volumeInitializationRate`, in MiB/s, at which data is fetched from the snapshot to create volumes that are fully initialized in a predictable amount of time. For more information about volume initialization, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the _Amazon EBS User Guide_. For more information about configuring Amazon EBS volumes, see [Defer volume configuration to launch time in an Amazon ECS task definition](./specify-ebs-config.html) and [Specify Amazon EBS volume configuration at Amazon ECS deployment](./configure-ebs-volume.html).