AWS AmazonECS medium security documentation change
Summary
Added documentation about updated IAM policy for Service Connect TLS secret lifecycle management
Security assessment
The change documents expanded IAM policy permissions for managing secrets lifecycle, which directly relates to security controls around secret management and access permissions
Diff
diff --git a/AmazonECS/latest/developerguide/document_history.md b/AmazonECS/latest/developerguide/document_history.md index e24410744..99289e1ef 100644 --- a//AmazonECS/latest/developerguide/document_history.md +++ b//AmazonECS/latest/developerguide/document_history.md @@ -11,0 +12 @@ Add permissions to `AmazonECSServiceRolePolicy`. | The `AmazonECSServiceRolePoli +Update [AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity](./security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity) policy | Updated [AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity](./security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity) policy to allow Amazon ECS to monitor lifecycle of Amazon ECS created secrets. | November 13, 2025 @@ -192 +193 @@ Amazon ECS expanded secrets support | Amazon ECS expanded support for using AWS -Interface VPC Endpoints (AWS PrivateLink) | Added support for configuring interface VPC endpoints powered by AWS PrivateLink. This allows you to create a private connection between your VPC and Amazon ECS without requiring access over the Internet, through a NAT instance, a VPN connection, or AWS Direct Connect. For more information, see [Interface VPC Endpoints (AWS PrivateLink)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/vpc-endpoints.html). | December 26, 2018 +Interface VPC Endpoints (AWS PrivateLink) | Added support for configuring interface VPC endpoints powered by AWS PrivateLink. This allows you to create a private connection between your VPC and Amazon ECS without requiring access over the Internet, through a NAT instance, a VPN connection, or Direct Connect. For more information, see [Interface VPC Endpoints (AWS PrivateLink)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/vpc-endpoints.html). | December 26, 2018