AWS cli documentation change

Service: cli · 2025-07-16 · Documentation low

File: cli/latest/reference/ecs/create-task-set.md

Summary

Added documentation for advancedConfiguration parameters in ECS task sets including alternate target groups, listener rules, and IAM role requirements for blue/green deployments

Security assessment

The change adds documentation about required IAM roles (roleArn) for load balancer operations, which relates to security permissions. However, there is no evidence this addresses a specific security vulnerability - rather it documents normal security controls for a new deployment feature.

Diff

diff --git a/cli/latest/reference/ecs/create-task-set.md b/cli/latest/reference/ecs/create-task-set.md
index 0e02ab685..fb9ed54b1 100644
--- a//cli/latest/reference/ecs/create-task-set.md
+++ b//cli/latest/reference/ecs/create-task-set.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.50 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
@@ -230,0 +231,20 @@ JSON Syntax:
+>> 
+>> advancedConfiguration -> (structure)
+>>
+>>> The advanced settings for the load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments.
+>>> 
+>>> alternateTargetGroupArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the alternate target group for Amazon ECS blue/green deployments.
+>>> 
+>>> productionListenerRule -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) that identifies the production listener rule for routing production traffic.
+>>> 
+>>> testListenerRule -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) that identifies the test listener rule or listener for routing test traffic.
+>>> 
+>>> roleArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the IAM role that grants Amazon ECS permission to call the Elastic Load Balancing APIs for you.
@@ -235 +255 @@ Shorthand Syntax:
-    targetGroupArn=string,loadBalancerName=string,containerName=string,containerPort=integer ...
+    targetGroupArn=string,loadBalancerName=string,containerName=string,containerPort=integer,advancedConfiguration={alternateTargetGroupArn=string,productionListenerRule=string,testListenerRule=string,roleArn=string} ...
@@ -246 +266,7 @@ JSON Syntax:
-        "containerPort": integer
+        "containerPort": integer,
+        "advancedConfiguration": {
+          "alternateTargetGroupArn": "string",
+          "productionListenerRule": "string",
+          "testListenerRule": "string",
+          "roleArn": "string"
+        }
@@ -832,0 +859,20 @@ taskSet -> (structure)
+>>> 
+>>> advancedConfiguration -> (structure)
+>>>
+>>>> The advanced settings for the load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments.
+>>>> 
+>>>> alternateTargetGroupArn -> (string)
+>>>>
+>>>>> The Amazon Resource Name (ARN) of the alternate target group for Amazon ECS blue/green deployments.
+>>>> 
+>>>> productionListenerRule -> (string)
+>>>>
+>>>>> The Amazon Resource Name (ARN) that identifies the production listener rule for routing production traffic.
+>>>> 
+>>>> testListenerRule -> (string)
+>>>>
+>>>>> The Amazon Resource Name (ARN) that identifies the test listener rule or listener for routing test traffic.
+>>>> 
+>>>> roleArn -> (string)
+>>>>
+>>>>> The Amazon Resource Name (ARN) of the IAM role that grants Amazon ECS permission to call the Elastic Load Balancing APIs for you.
@@ -949 +995 @@ taskSet -> (structure)
-  * [AWS CLI 2.27.50 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.51 Command Reference](../../index.html) »