AWS AmazonECS documentation change
Summary
Added 'ecs-service-scheduler' as additional roleSessionName value in CloudTrail logs
Security assessment
This change improves auditability by documenting additional session names used in CloudTrail logs, but doesn't address a specific security vulnerability
Diff
diff --git a/AmazonECS/latest/developerguide/AmazonECSInfrastructureRolePolicyForLoadBalancers.md b/AmazonECS/latest/developerguide/AmazonECSInfrastructureRolePolicyForLoadBalancers.md index 836818f47..5d1fa0568 100644 --- a//AmazonECS/latest/developerguide/AmazonECSInfrastructureRolePolicyForLoadBalancers.md +++ b//AmazonECS/latest/developerguide/AmazonECSInfrastructureRolePolicyForLoadBalancers.md @@ -18 +18 @@ An Amazon ECS infrastructure IAM role for load balancers allows Amazon ECS to ma -When Amazon ECS assumes this role to take actions on your behalf, the events will be visible in AWS CloudTrail. If Amazon ECS uses the role to manage load balancer resources for your blue/green deployments, the CloudTrail log `roleSessionName` will be `ECSNetworkingWithELB`. You can use this name to search events in the CloudTrail console by filtering for **User name**. +When Amazon ECS assumes this role to take actions on your behalf, the events will be visible in AWS CloudTrail. If Amazon ECS uses the role to manage load balancer resources for your blue/green deployments, the CloudTrail log `roleSessionName` will be `ECSNetworkingWithELB` or `ecs-service-scheduler`. You can use this name to search events in the CloudTrail console by filtering for **User name**.