AWS cli documentation change
Summary
Added detailed documentation for managed instances capacity provider configuration including infrastructure roles, security groups, instance requirements, and monitoring settings. Updated CLI version reference from 2.31.3 to 2.31.5.
Security assessment
The changes add documentation about security-related configurations including infrastructure IAM roles, security group controls, instance profile permissions, and encryption settings. However, there is no evidence this addresses a specific security vulnerability - rather it enhances documentation of existing security features.
Diff
diff --git a/cli/latest/reference/ecs/delete-capacity-provider.md b/cli/latest/reference/ecs/delete-capacity-provider.md index 8b500c44f..349bd681d 100644 --- a//cli/latest/reference/ecs/delete-capacity-provider.md +++ b//cli/latest/reference/ecs/delete-capacity-provider.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -74,0 +75 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20 + [--cluster <value>] @@ -102,0 +104,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20 +`--cluster` (string) + +> The name of the cluster that contains the capacity provider to delete. Managed instances capacity providers are cluster-scoped and can only be deleted from their associated cluster. + @@ -291,0 +297,4 @@ capacityProvider -> (structure) +> cluster -> (string) +> +>> The cluster that this capacity provider is associated with. Managed instances capacity providers are cluster-scoped, meaning they can only be used within their associated cluster. +> @@ -297,0 +307 @@ capacityProvider -> (structure) +>> * `PROVISIONING` @@ -298,0 +309 @@ capacityProvider -> (structure) +>> * `DEPROVISIONING` @@ -400,0 +412,378 @@ capacityProvider -> (structure) +> +> managedInstancesProvider -> (structure) +> +>> The configuration for the Amazon ECS Managed Instances provider. This includes the infrastructure role, the launch template configuration, and tag propagation settings. +>> +>> infrastructureRoleArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the infrastructure role that Amazon ECS assumes to manage instances. This role must include permissions for Amazon EC2 instance lifecycle management, networking, and any additional Amazon Web Services services required for your workloads. +>>> +>>> For more information, see [Amazon ECS infrastructure IAM role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/infrastructure_IAM_role.html) in the _Amazon ECS Developer Guide_ . +>> +>> instanceLaunchTemplate -> (structure) +>> +>>> The launch template that defines how Amazon ECS launches Amazon ECS Managed Instances. This includes the instance profile for your tasks, network and storage configuration, and instance requirements that determine which Amazon EC2 instance types can be used. +>>> +>>> For more information, see [Store instance launch parameters in Amazon EC2 launch templates](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html) in the _Amazon EC2 User Guide_ . +>>> +>>> ec2InstanceProfileArn -> (string) [required] +>>> +>>>> The Amazon Resource Name (ARN) of the instance profile that Amazon ECS applies to Amazon ECS Managed Instances. This instance profile must include the necessary permissions for your tasks to access Amazon Web Services services and resources. +>>>> +>>>> For more information, see [Amazon ECS instance profile for Managed Instances](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/managed-instances-instance-profile.html) in the _Amazon ECS Developer Guide_ . +>>> +>>> networkConfiguration -> (structure) [required] +>>> +>>>> The network configuration for Amazon ECS Managed Instances. This specifies the subnets and security groups that instances use for network connectivity. +>>>> +>>>> subnets -> (list) +>>>> +>>>>> The list of subnet IDs where Amazon ECS can launch Amazon ECS Managed Instances. Instances are distributed across the specified subnets for high availability. All subnets must be in the same VPC. +>>>>> +>>>>> (string) +>>>> +>>>> securityGroups -> (list) +>>>> +>>>>> The list of security group IDs to apply to Amazon ECS Managed Instances. These security groups control the network traffic allowed to and from the instances. +>>>>> +>>>>> (string) +>>> +>>> storageConfiguration -> (structure) +>>> +>>>> The storage configuration for Amazon ECS Managed Instances. This defines the root volume size and type for the instances. +>>>> +>>>> storageSizeGiB -> (integer) +>>>> +>>>>> The size of the tasks volume. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> + +>>> +>>> monitoring -> (string) +>>> +>>>> CloudWatch provides two categories of monitoring: basic monitoring and detailed monitoring. By default, your managed instance is configured for basic monitoring. You can optionally enable detailed monitoring to help you more quickly identify and act on operational issues. You can enable or turn off detailed monitoring at launch or when the managed instance is running or stopped. For more information, see [Detailed monitoring for Amazon ECS Managed Instances](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/detailed-monitoring-managed-instances.html) in the Amazon ECS Developer Guide. +>>>> +>>>> Possible values: +>>>> +>>>> * `BASIC` +>>>> * `DETAILED` +>>>> + +>>> +>>> instanceRequirements -> (structure) +>>> +>>>> The instance requirements. You can specify: +>>>> +>>>> * The instance types +>>>> * Instance requirements such as vCPU count, memory, network performance, and accelerator specifications +>>>> + +>>>> +>>>> Amazon ECS automatically selects the instances that match the specified criteria. +>>>> +>>>> vCpuCount -> (structure) [required] +>>>> +>>>>> The minimum and maximum number of vCPUs for the instance types. Amazon ECS selects instance types that have vCPU counts within this range. +>>>>> +>>>>> min -> (integer) [required] +>>>>> +>>>>>> The minimum number of vCPUs. Instance types with fewer vCPUs than this value are excluded from selection. +>>>>> +>>>>> max -> (integer) +>>>>> +>>>>>> The maximum number of vCPUs. Instance types with more vCPUs than this value are excluded from selection. +>>>> +>>>> memoryMiB -> (structure) [required] +>>>> +>>>>> The minimum and maximum amount of memory in mebibytes (MiB) for the instance types. Amazon ECS selects instance types that have memory within this range. +>>>>> +>>>>> min -> (integer) [required] +>>>>> +>>>>>> The minimum amount of memory in MiB. Instance types with less memory than this value are excluded from selection. +>>>>> +>>>>> max -> (integer) +>>>>> +>>>>>> The maximum amount of memory in MiB. Instance types with more memory than this value are excluded from selection. +>>>> +>>>> cpuManufacturers -> (list) +>>>> +>>>>> The CPU manufacturers to include or exclude. You can specify `intel` , `amd` , or `amazon-web-services` to control which CPU types are used for your workloads. +>>>>> +>>>>> (string) +>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `intel` +>>>>>> * `amd` +>>>>>> * `amazon-web-services` +>>>>>> + +>>>> +>>>> memoryGiBPerVCpu -> (structure) +>>>> +>>>>> The minimum and maximum amount of memory per vCPU in gibibytes (GiB). This helps ensure that instance types have the appropriate memory-to-CPU ratio for your workloads. +>>>>> +>>>>> min -> (double) +>>>>> +>>>>>> The minimum amount of memory per vCPU in GiB. Instance types with a lower memory-to-vCPU ratio are excluded from selection. +>>>>> +>>>>> max -> (double) +>>>>> +>>>>>> The maximum amount of memory per vCPU in GiB. Instance types with a higher memory-to-vCPU ratio are excluded from selection. +>>>> +>>>> excludedInstanceTypes -> (list) +>>>> +>>>>> The instance types to exclude from selection. Use this to prevent Amazon ECS from selecting specific instance types that may not be suitable for your workloads. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * max: `400` +>>>>> + +>>>>> +>>>>> (string) +>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `1` +>>>>>> * max: `30` +>>>>>> * pattern: `[a-zA-Z0-9\.\*\-]+` +>>>>>> + +>>>> +>>>> instanceGenerations -> (list) +>>>> +>>>>> The instance generations to include. You can specify `current` to use the latest generation instances, or `previous` to include previous generation instances for cost optimization. +>>>>> +>>>>> (string) +>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `current` +>>>>>> * `previous` +>>>>>> + +>>>> +>>>> spotMaxPricePercentageOverLowestPrice -> (integer) +>>>> +>>>>> The maximum price for Spot instances as a percentage over the lowest priced On-Demand instance. This helps control Spot instance costs while maintaining access to capacity. +>>>> +>>>> onDemandMaxPricePercentageOverLowestPrice -> (integer) +>>>> +>>>>> The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon ECS selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold. +>>>> +>>>> bareMetal -> (string) +>>>> +>>>>> Indicates whether to include bare metal instance types. Set to `included` to allow bare metal instances, `excluded` to exclude them, or `required` to use only bare metal instances. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `included` +>>>>> * `required` +>>>>> * `excluded` +>>>>>