AWS AmazonECS documentation change

Service: AmazonECS · 2025-08-10 · Documentation low

File: AmazonECS/latest/developerguide/security-iam-roles.md

Summary

Removed trust policy JSON example and permissions policy example. Fixed typo in ec2:DescribeTags description.

Security assessment

The removed JSON examples were documentation of required IAM policies but their removal doesn't indicate a security fix. The typo fix has no security impact. No evidence of addressing vulnerabilities.

Diff

diff --git a/AmazonECS/latest/developerguide/security-iam-roles.md b/AmazonECS/latest/developerguide/security-iam-roles.md
index 80d17c72b..8d7f9ee48 100644
--- a//AmazonECS/latest/developerguide/security-iam-roles.md
+++ b//AmazonECS/latest/developerguide/security-iam-roles.md
@@ -43,24 +42,0 @@ We recommend that you assign a task role. Its role can be distinguished from the
-When assigning IAM roles for a task, you must use the following trust policy so that each of your tasks can assume an IAM role that's different from the one that your EC2 instance uses. This way, your task doesn't inherit the role of your EC2 instance.
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "",
-          "Effect": "Allow",
-          "Principal": {
-            "Service": "ecs-tasks.amazonaws.com"
-          },
-          "Action": "sts:AssumeRole"
-        }
-      ]
-    }
-    
-
@@ -108 +84 @@ The `AmazonEC2ContainerServiceforEC2Role` managed IAM policy includes the follow
-  * `ec2:DescribeTags` – )Optional) Allows a principal to describe the tags that are associated with an Amazon EC2 instance. This permission is used by the Amazon ECS container agent to support resource tag propagation. For more information, see [How resources are tagged](./ecs-using-tags.html#tag-resources).
+  * `ec2:DescribeTags` – (Optional) Allows a principal to describe the tags that are associated with an Amazon EC2 instance. This permission is used by the Amazon ECS container agent to support resource tag propagation. For more information, see [How resources are tagged](./ecs-using-tags.html#tag-resources).
@@ -145,27 +120,0 @@ Although this permission is not required, we recommend that you add it to allowt
-The following policy contains the required permissions.
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "ecs:DiscoverPollEndpoint",
-                    "ecs:Poll",
-                    "ecs:RegisterContainerInstance",
-                    "ecs:UpdateContainerInstancesState",
-                    "ecs:Submit*"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-    
-