AWS AmazonECS documentation change
Summary
Added documentation about EC2 ENI provisioning/deprovisioning permissions in service-linked roles
Security assessment
Documents existing role capabilities without indicating any security issue resolution. Part of normal role permission documentation.
Diff
diff --git a/AmazonECS/latest/developerguide/using-service-linked-roles-for-clusters.md b/AmazonECS/latest/developerguide/using-service-linked-roles-for-clusters.md index fa9e892ec..557017c64 100644 --- a//AmazonECS/latest/developerguide/using-service-linked-roles-for-clusters.md +++ b//AmazonECS/latest/developerguide/using-service-linked-roles-for-clusters.md @@ -47,0 +48,2 @@ The role permissions policy named AmazonECSServiceRolePolicy allows Amazon ECS t + * Action: Amazon ECS can invoke Amazon EC2 provision and de-provision ENI when starting and stopping tasks. +