AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-16 · Documentation low

File: cli/latest/reference/ecs/describe-service-revisions.md

Summary

Added documentation for advanced load balancer configuration, test traffic routing rules, and resolved configuration details in blue/green deployments. Updated CLI version references.

Security assessment

The changes document security-related features like IAM roles (roleArn) required for traffic shifting and header-based routing rules for test traffic. While these describe security controls, there's no evidence of addressing a specific vulnerability. The additions enhance documentation of existing security features rather than patching a security issue.

Diff

diff --git a/cli/latest/reference/ecs/describe-service-revisions.md b/cli/latest/reference/ecs/describe-service-revisions.md
index 117edf1aa..b8cb1625c 100644
--- a//cli/latest/reference/ecs/describe-service-revisions.md
+++ b//cli/latest/reference/ecs/describe-service-revisions.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.50 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
@@ -399,0 +400,20 @@ serviceRevisions -> (list)
+>>>> 
+>>>> advancedConfiguration -> (structure)
+>>>>
+>>>>> The advanced settings for the load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments.
+>>>>> 
+>>>>> alternateTargetGroupArn -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) of the alternate target group for Amazon ECS blue/green deployments.
+>>>>> 
+>>>>> productionListenerRule -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) that identifies the production listener rule for routing production traffic.
+>>>>> 
+>>>>> testListenerRule -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) that identifies the test listener rule or listener for routing test traffic.
+>>>>> 
+>>>>> roleArn -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) of the IAM role that grants Amazon ECS permission to call the Elastic Load Balancing APIs for you.
@@ -566,0 +587,20 @@ serviceRevisions -> (list)
+>>>>>>> 
+>>>>>>> testTrafficRules -> (structure)
+>>>>>>>
+>>>>>>>> The configuration for test traffic routing rules used during blue/green deployments with Amazon ECS Service Connect. This allows you to route a portion of traffic to the new service revision of your service for testing before shifting all production traffic.
+>>>>>>>> 
+>>>>>>>> header -> (structure)
+>>>>>>>>
+>>>>>>>>> The HTTP header-based routing rules that determine which requests should be routed to the new service version during blue/green deployment testing. These rules provide fine-grained control over test traffic routing based on request headers.
+>>>>>>>>> 
+>>>>>>>>> name -> (string)
+>>>>>>>>>
+>>>>>>>>>> The name of the HTTP header to examine for test traffic routing. Common examples include custom headers like `X-Test-Version` or `X-Canary-Request` that can be used to identify test traffic.
+>>>>>>>>> 
+>>>>>>>>> value -> (structure)
+>>>>>>>>>
+>>>>>>>>>> The header value matching configuration that determines how the HTTP header value is evaluated for test traffic routing decisions.
+>>>>>>>>>> 
+>>>>>>>>>> exact -> (string)
+>>>>>>>>>>
+>>>>>>>>>>> The exact value that the HTTP header must match for the test traffic routing rule to apply. This provides precise control over which requests are routed to the new service revision during blue/green deployments.
@@ -972,0 +1013,20 @@ serviceRevisions -> (list)
+>> 
+>> resolvedConfiguration -> (structure)
+>>
+>>> The resolved configuration for the service revision which contains the actual resources your service revision uses, such as which target groups serve traffic.
+>>> 
+>>> loadBalancers -> (list)
+>>>
+>>>> The resolved load balancer configuration for the service revision. This includes information about which target groups serve traffic and which listener rules direct traffic to them.
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> The resolved load balancer configuration for a service revision. This includes information about which target groups serve traffic and which listener rules direct traffic to them.
+>>>>> 
+>>>>> targetGroupArn -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) of the target group associated with the service revision.
+>>>>> 
+>>>>> productionListenerRule -> (string)
+>>>>>
+>>>>>> The Amazon Resource Name (ARN) of the production listener rule or listener that directs traffic to the target group associated with the service revision.
@@ -1004 +1064 @@ failures -> (list)
-  * [AWS CLI 2.27.50 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.51 Command Reference](../../index.html) »