AWS AmazonECS documentation change

Service: AmazonECS · 2025-10-22 · Documentation low

File: AmazonECS/latest/developerguide/migrate-codedeploy-to-ecs-bluegreen-cloudformation-template.md

Summary

Replaced detailed IAM role configuration with a link to policy documentation

Security assessment

The change replaces an inline IAM role example with a link to dedicated documentation about infrastructure IAM roles for load balancers. This directs users to comprehensive security documentation, thereby adding references to security best practices.

Diff

diff --git a/AmazonECS/latest/developerguide/migrate-codedeploy-to-ecs-bluegreen-cloudformation-template.md b/AmazonECS/latest/developerguide/migrate-codedeploy-to-ecs-bluegreen-cloudformation-template.md
index f487732b3..e86cd1d9a 100644
--- a//AmazonECS/latest/developerguide/migrate-codedeploy-to-ecs-bluegreen-cloudformation-template.md
+++ b//AmazonECS/latest/developerguide/migrate-codedeploy-to-ecs-bluegreen-cloudformation-template.md
@@ -9 +9 @@ Source templateMigration stepsTesting recommendationsTemplate after migration
-Migrate a AWS CloudFormation template that uses CodeDeploy blue/green deployments for Amazon ECS services to one that uses the native Amazon ECS blue/green deployment strategy. The migration follows the "Reuse the same Elastic Load Balancing resources used for CodeDeploy" approach. For more information, see [Migrate CodeDeploy blue/green deployments to Amazon ECS blue/green deployments](./migrate-codedeploy-to-ecs-bluegreen.html) documentation.
+Migrate a AWS CloudFormation template that uses CodeDeploy blue/green deployments for Amazon ECS services to one that uses the native Amazon ECS blue/green deployment strategy. The migration follows the "Reuse the same Elastic Load Balancing resources used for CodeDeploy" approach. For more information, see [Migrate CodeDeploy blue/green deployments to Amazon ECS blue/green deployments](./migrate-codedeploy-to-ecs-bluegreen.html).
@@ -426,28 +426 @@ Update and add the following:
-Add a new IAM role that allows Amazon ECS to manage load balancer resources:
-
-Replace the `user-input` with your value.
-    
-    
-    {
-      "ECSInfrastructureRoleForLoadBalancers": {
-        "Type": "AWS::IAM::Role",
-        "Properties": {
-          "AssumeRolePolicyDocument": {
-            "Version": "2012-10-17",		 	 	 
-            "Statement": [
-              {
-                "Sid": "AllowAccessToECSForInfrastructureManagement",
-                "Effect": "Allow",
-                "Principal": {
-                  "Service": "ecs.amazonaws.com"
-                },
-                "Action": "sts:AssumeRole"
-              }
-            ]
-          },
-          "ManagedPolicyArns": [
-            "arn:aws:iam::aws:policy/AmazonECSInfrastructureRolePolicyForLoadBalancers"
-          ]
-        }
-      }
-    }
+Add a new IAM role that allows Amazon ECS to manage load balancer resources. For more information, see [Amazon ECS infrastructure IAM role for load balancers](./AmazonECSInfrastructureRolePolicyForLoadBalancers.html)