AWS Security ChangesHomeSearch

AWS AmazonECS documentation change

Service: AmazonECS · 2025-11-22 · Documentation low

File: AmazonECS/latest/developerguide/document_history.md

Summary

Added entry for new IAM permission (ec2:DescribeInstanceEventWindows) to AmazonECSServiceRolePolicy and standardized terminology (changed 'Auto Scaling group' to 'Amazon EC2 Auto Scaling group', 'Elastic Load Balancing' to 'ELB') in multiple entries

Security assessment

The IAM policy update adds a permission required for operational functionality (fetching EC2 Event Windows) but does not indicate a security vulnerability fix. Terminology changes improve consistency but don't address security issues.

Diff

diff --git a/AmazonECS/latest/developerguide/document_history.md b/AmazonECS/latest/developerguide/document_history.md
index 99289e1ef..0f001d5b6 100644
--- a//AmazonECS/latest/developerguide/document_history.md
+++ b//AmazonECS/latest/developerguide/document_history.md
@@ -10,0 +11 @@ Change |  Description |  Date
+Add permissions to [AmazonECSServiceRolePolicy](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSServiceRolePolicy) managed policy. |  The `AmazonECSServiceRolePolicy` managed IAM policy was updated to include the `ec2:DescribeInstanceEventWindows` permission. This permission allows Amazon ECS to fetch Amazon EC2 Event Windows for services and clusters associated with Event Windows. | November 20, 2025  
@@ -101 +102 @@ New Fargate quotas |  Fargate is transitioning from task count-based quotas to v
-Support for Amazon EC2 Auto Scaling warm pools. |  You can now use Amazon EC2 Auto Scaling warm pools to scale out your applications faster and save costs. For more information, see [Configuring pre-initialized instances for your Amazon ECS Auto Scaling group](./using-warm-pool.html). |  March 23, 2022  
+Support for Amazon EC2 Auto Scaling warm pools. |  You can now use Amazon EC2 Auto Scaling warm pools to scale out your applications faster and save costs. For more information, see [Configuring pre-initialized instances for your Amazon ECS Amazon EC2 Auto Scaling group](./using-warm-pool.html). |  March 23, 2022  
@@ -123 +124 @@ New console experience |  Amazon ECS has released a new console experience which
-Capacity provider update |  Amazon ECS added support for updating an existing Auto Scaling group capacity provider.  |  November 23, 2020  
+Capacity provider update |  Amazon ECS added support for updating an existing Amazon EC2 Auto Scaling group capacity provider.  |  November 23, 2020  
@@ -135 +136 @@ Amazon ECS optimized Amazon Linux 2 (Neuron) AMI released |  Amazon ECS released
-Added support for deleting capacity providers |  Amazon ECS added support for deleting Auto Scaling group capacity providers. |  June 11, 2020  
+Added support for deleting capacity providers |  Amazon ECS added support for deleting Amazon EC2 Auto Scaling group capacity providers. |  June 11, 2020  
@@ -276 +277 @@ New service scheduler behavior |  Updated information about the behavior for ser
-Elastic Load Balancing health check initialization wait period |  Added ability to specify a wait period for health checks. |  December 27, 2017  
+ELB health check initialization wait period |  Added ability to specify a wait period for health checks. |  December 27, 2017  
@@ -305 +306 @@ Amazon ECS container logging to CloudWatch Logs |  Added support for the awslogs
-Amazon ECS services with Elastic Load Balancing support for dynamic ports |  Added support for a load balancer to support multiple instance:port combinations per listener, which increases flexibility for containers. Now you can let Docker dynamically define the container's host port and the ECS scheduler registers the instance:port with the load balancer. For more information, see [Use load balancing to distribute Amazon ECS service traffic](./service-load-balancing.html). |  August 11, 2016  
+Amazon ECS services with ELB support for dynamic ports |  Added support for a load balancer to support multiple instance:port combinations per listener, which increases flexibility for containers. Now you can let Docker dynamically define the container's host port and the ECS scheduler registers the instance:port with the load balancer. For more information, see [Use load balancing to distribute Amazon ECS service traffic](./service-load-balancing.html). |  August 11, 2016  
@@ -316 +317 @@ Task placement across Availability Zones |  The Amazon ECS service scheduler add
-CloudWatch metrics for Amazon ECS clusters and services |  Amazon ECS added custom CloudWatch metrics for CPU and memory utilization for each container instance, service, and task definition family in a cluster. These new metrics can be used to scale container instances in a cluster using Auto Scaling groups or to create custom CloudWatch alarms. |  August 17, 2015  
+CloudWatch metrics for Amazon ECS clusters and services |  Amazon ECS added custom CloudWatch metrics for CPU and memory utilization for each container instance, service, and task definition family in a cluster. These new metrics can be used to scale container instances in a cluster using Amazon EC2 Auto Scaling groups or to create custom CloudWatch alarms. |  August 17, 2015  
@@ -320 +321 @@ Automated Amazon ECS agent updates |  Added ability to see the ECS agent version
-Amazon ECS service scheduler and Elastic Load Balancing integration |  Added ability to define a service and associate that service with an Elastic Load Balancing load balancer. |  April 9, 2015  
+Amazon ECS service scheduler and ELB integration |  Added ability to define a service and associate that service with an ELB load balancer. |  April 9, 2015