AWS AmazonECS documentation change
Summary
Clarified service-linked role usage for AmazonECSServiceRolePolicy and added policy update entry
Security assessment
Provides clearer guidance about IAM role assignments and documents new Cloud Map permissions in managed policy
Diff
diff --git a/AmazonECS/latest/developerguide/security-iam-awsmanpol.md b/AmazonECS/latest/developerguide/security-iam-awsmanpol.md index 2d725f5b6..0ecf7e2d8 100644 --- a//AmazonECS/latest/developerguide/security-iam-awsmanpol.md +++ b//AmazonECS/latest/developerguide/security-iam-awsmanpol.md @@ -78 +78 @@ To view the permissions for this policy, see [AmazonECSTaskExecutionRolePolicy]( -The `AmazonECSServiceRolePolicy` managed IAM policy enables Amazon Elastic Container Service to manage your cluster. This policy can be added to your task execution IAM role. For more information, see [Amazon ECS task execution IAM role](./task_execution_IAM_role.html). +The `AmazonECSServiceRolePolicy` managed IAM policy enables Amazon Elastic Container Service to manage your cluster. This policy can be added to your [AWSServiceRoleForECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using-service-linked-roles-for-clusters.html#service-linked-role-permissions-clusters) service-linked role. For more information, see [Amazon ECS task execution IAM role](./task_execution_IAM_role.html). @@ -119,0 +120 @@ Change | Description | Date +Add permissions to [AmazonECSServiceRolePolicy](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSServiceRolePolicy) | The `AmazonECSServiceRolePolicy` managed IAM policy was updated with new AWS Cloud Map permissions which Amazon ECS can update AWS Cloud Map service attributes for services that Amazon ECS manages. | June 24, 2025