AWS AmazonECS documentation change
Summary
Clarified networking requirements for Fargate tasks in dual-stack mode, specifying internet gateway for public subnets and NAT gateway for private subnets
Security assessment
The changes provide clearer network configuration guidance but don't address any security vulnerability or introduce security documentation. The focus is on connectivity requirements for dependency services during task launch.
Diff
diff --git a/AmazonECS/latest/developerguide/fargate-task-networking.md b/AmazonECS/latest/developerguide/fargate-task-networking.md index 67cb785ef..03d12ca50 100644 --- a//AmazonECS/latest/developerguide/fargate-task-networking.md +++ b//AmazonECS/latest/developerguide/fargate-task-networking.md @@ -82 +82,3 @@ If the following conditions are met, Amazon ECS tasks on Fargate are assigned an -Amazon ECS tasks on Fargate running in a VPC in dual-stack mode need IPv4 (0.0.0.0/0) routes to an internet gateway or NAT gateway. For more information, see [Internet gateways](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html) in the _Amazon VPC User Guide_. +For Amazon ECS tasks on Fargate running in a VPC in dual-stack mode, to communicate with dependency services used in task launch process such as ECR, SSM and SecretManager, the public subnet's route table needs IPv4 (0.0.0.0/0) route to an internet gateway and the private subnet's route table needs IPv4 (0.0.0.0/0) route to an NAT gateway. For more information, see [Internet gateways](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html) and [NAT gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html) in the _Amazon VPC User Guide_. + +For examples of how to configure a dual-stack VPC, see [ Example dual-stack VPC configuration](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-migrate-ipv6-example.html).