AWS AWSCloudFormation medium security documentation change
Summary
Added detailed validation rules for container image references including SHA256 digest requirements
Security assessment
Specifies strict requirements for image digests (sha256 with 64-character limit) which helps prevent image spoofing and ensures cryptographic integrity of container images
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinition.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinition.md index 835dc450e..8793feeea 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinition.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-taskdefinition-containerdefinition.md @@ -432 +432 @@ _Required_ : No -The image used to start a container. This string is passed directly to the Docker daemon. By default, images in the Docker Hub registry are available. Other repositories are specified with either `_repository-url_ /_image_ :_tag_` or `_repository-url_ /_image_ @_digest_`. Up to 255 letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs are allowed. This parameter maps to `Image` in the docker container create command and the `IMAGE` parameter of docker run. +The image used to start a container. This string is passed directly to the Docker daemon. By default, images in the Docker Hub registry are available. Other repositories are specified with either `_repository-url_ /_image_ :_tag_` or `_repository-url_ /_image_ @_digest_`. For images using tags (repository-url/image:tag), up to 255 characters total are allowed, including letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs (#). For images using digests (repository-url/image@digest), the 255 character limit applies only to the repository URL and image name (everything before the @ sign). The only supported hash function is sha256, and the hash value after sha256: must be exactly 64 characters (only letters A-F, a-f, and numbers 0-9 are allowed). This parameter maps to `Image` in the docker container create command and the `IMAGE` parameter of docker run.