AWS AmazonECS documentation change
Summary
Updated configuration examples: corrected instance profile ARN, modified resource requirements parameters, removed example configurations, and added monitoring setting
Security assessment
Changes appear to correct parameter values (ecsInstanceProfile -> ecsInstanceRole) and adjust resource allocation ranges. No explicit security context or vulnerability mitigation is mentioned. Monitoring addition could be considered a security enhancement but isn't explicitly framed as such.
Diff
diff --git a/AmazonECS/latest/developerguide/create-capacity-provider-managed-instances.md b/AmazonECS/latest/developerguide/create-capacity-provider-managed-instances.md index 0ef987a6e..856089e02 100644 --- a//AmazonECS/latest/developerguide/create-capacity-provider-managed-instances.md +++ b//AmazonECS/latest/developerguide/create-capacity-provider-managed-instances.md @@ -5 +5 @@ -PrerequisitesConsole procedureAWS CLI procedureExample configurationsNext steps +PrerequisitesConsole procedureAWS CLI procedureNext steps @@ -123 +123 @@ The following `capacity-provider-definition.json` can be used to specify basic i - "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceProfile", + "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceRole", @@ -125,4 +124,0 @@ The following `capacity-provider-definition.json` can be used to specify basic i - "memoryMiB": { - "max": 8, - "min": 2 - }, @@ -130,3 +126,6 @@ The following `capacity-provider-definition.json` can be used to specify basic i - "max": 16384, - "min": 4096 - } + "min": 4, + "max": 8 + }, + "memoryMiB": { + "min": 8192, + "max": 16384 @@ -146,0 +146,2 @@ The following `capacity-provider-definition.json` can be used to specify basic i + "monitoring": "basic" + }, @@ -156 +156,0 @@ The following `capacity-provider-definition.json` can be used to specify basic i -Output: @@ -158,53 +157,0 @@ Output: - { - "capacityProviders": [ - { - "capacityProviderArn": "arn:aws:ecs:region:aws_account_id:capacity-provider/my-managed-instances-provider", - "cluster": "my-cluster" - "name": "my-managed-capacity-provider", - "status": "ACTIVE", - "type": "MANAGED_INSTANCES", - "tags": [ - { - "key": "version", - "value": "test" - } - ], - "managedInstancesProvider": { - "infrastructureRoleArn": "arn:aws:iam::123456789012:role/ecsInfrastructureRole", - "instanceLaunchTemplate": { - "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceProfile", - "instanceRequirements": { - "memoryMiB": { - "max": 8, - "min": 2 - }, - "vCpuCount": { - "max": 16384, - "min": 4096 - } - } - }, - "networkConfiguration": { - "subnets": [ - "subnet-abcdef01234567", - "subnet-bcdefa98765432" - ], - "securityGroups": [ - "sg-0123456789abcdef" - ] - }, - "storageConfiguration": { - "storageSizeGiB": 100 - }, - "propagateTags": "CAPACITY_PROVIDER" - } - } - ] - } - - - - -## Example configurations - -The following examples show common capacity provider configurations for different use cases: @@ -212,100 +158,0 @@ The following examples show common capacity provider configurations for differen -###### Example General-purpose workloads - -This configuration selects cost-optimized instances with 2-8 vCPUs and 4-16 GiB of memory: - - - { - "name": "my-managed-capacity-provider", - "cluster": "my-cluster", - "managedInstancesProvider": { - "infrastructureRoleArn": "arn:aws:iam::123456789012:role/ecsInfrastructureRole", - "instanceLaunchTemplate": { - "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceProfile", - "instanceRequirements": { - "memoryMiB": { - "max": 8, - "min": 2 - }, - "vCpuCount": { - "max": 16384, - "min": 4096 - }, - "cpuManufacturers": ["intel", "amd"] - } - }, - "networkConfiguration": { - "subnets": [ - "subnet-abcdef01234567", - "subnet-bcdefa98765432" - ], - "securityGroups": [ - "sg-0123456789abcdef" - ] - }, - } - } - -###### Example GPU-accelerated workloads - -This configuration selects GPU instances for machine learning workloads: - - - { - "name": "ml-gpu-provider", - "cluster": "my-cluster", - "managedInstancesProvider": { - "infrastructureRoleArn": "arn:aws:iam::123456789012:role/ecsInfrastructureRole", - "instanceLaunchTemplate": { - "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceProfile", - "instanceRequirements": { - "allowedInstanceTypes": [ "p3.2xlarge", "p3.8xlarge", "g4dn.xlarge", "g4dn.2xlarge" ], - "acceleratorTypes": ["gpu"], - "acceleratorCount": { - "max": 4, - "min": 1 - } - } - }, - "networkConfiguration": { - "subnets": [ - "subnet-abcdef01234567", - "subnet-bcdefa98765432" - ], - "securityGroups": [ - "sg-0123456789abcdef" - ] - } - } - } - -###### Example High-memory workloads - -This configuration selects memory-optimized instances for data processing: - - - { - "name": "high-memory-provider", - "cluster": "my-cluster", - "managedInstancesProvider": { - "infrastructureRoleArn": "arn:aws:iam::123456789012:role/ecsInfrastructureRole", - "instanceLaunchTemplate": { - "ec2InstanceProfileArn": "arn:aws:iam::123456789012:instance-profile/ecsInstanceProfile", - "instanceRequirements": { - "allowedInstanceTypes": [ "r5.2xlarge", "r5.4xlarge", "r5.8xlarge", "x1e.xlarge" ], - "memoryMiB": { - "max": 131072, - "min": 32768 - } - } - }, - "networkConfiguration": { - "subnets": [ - "subnet-abcdef01234567", - "subnet-bcdefa98765432" - ], - "securityGroups": [ - "sg-0123456789abcdef" - ] - } - } - }