AWS AmazonECS documentation change
Summary
Added documentation about new ec2:DescribeInstances permission in AmazonECSInfrastructureRolePolicyForVolumes
Security assessment
Documents an IAM policy update to prevent device name collisions, which improves operational reliability but does not directly address a security vulnerability. The change enhances security documentation by describing updated permissions.
Diff
diff --git a/AmazonECS/latest/developerguide/document_history.md b/AmazonECS/latest/developerguide/document_history.md index bf763fd69..e9eeaedd6 100644 --- a//AmazonECS/latest/developerguide/document_history.md +++ b//AmazonECS/latest/developerguide/document_history.md @@ -10,0 +11 @@ Change | Description | Date +Add permissions to [AmazonECSInfrastructureRolePolicyForVolumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSInfrastructureRolePolicyForVolumes) | The `AmazonECSInfrastructureRolePolicyForVolumes` policy has been updated to add the `ec2:DescribeInstances` permission. The permission helps prevent device name collision for Amazon EBS volumes that are attached to Amazon ECS tasks that run on the same container instance. | June 2, 2025