AWS AmazonECS documentation change
Summary
1. Added entry for new 'ssmmessages:OpenDataChannel' permission in AmazonECSServiceRolePolicy. 2. Updated 'ELB' references to 'Elastic Load Balancing' in historical entries.
Security assessment
The added IAM permission ('ssmmessages:OpenDataChannel') enables ECS Exec sessions, which is a security feature for secure container access. However, there's no evidence this addresses an existing vulnerability. Other changes are terminological.
Diff
diff --git a/AmazonECS/latest/developerguide/document_history.md b/AmazonECS/latest/developerguide/document_history.md index b127a973e..125aec74c 100644 --- a//AmazonECS/latest/developerguide/document_history.md +++ b//AmazonECS/latest/developerguide/document_history.md @@ -10,0 +11 @@ Change | Description | Date +Add permissions to [AmazonECSServiceRolePolicy](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSServiceRolePolicy) managed policy. | The `AmazonECSServiceRolePolicy` managed IAM policy was updated to include the `ssmmessages:OpenDataChannel` permission. This permission allows Amazon ECS to open data channels for ECS Exec sessions. | January 20, 2026 @@ -284 +285 @@ New service scheduler behavior | Updated information about the behavior for ser -ELB health check initialization wait period | Added ability to specify a wait period for health checks. | December 27, 2017 +Elastic Load Balancing health check initialization wait period | Added ability to specify a wait period for health checks. | December 27, 2017 @@ -313 +314 @@ Amazon ECS container logging to CloudWatch Logs | Added support for the awslogs -Amazon ECS services with ELB support for dynamic ports | Added support for a load balancer to support multiple instance:port combinations per listener, which increases flexibility for containers. Now you can let Docker dynamically define the container's host port and the ECS scheduler registers the instance:port with the load balancer. For more information, see [Use load balancing to distribute Amazon ECS service traffic](./service-load-balancing.html). | August 11, 2016 +Amazon ECS services with Elastic Load Balancing support for dynamic ports | Added support for a load balancer to support multiple instance:port combinations per listener, which increases flexibility for containers. Now you can let Docker dynamically define the container's host port and the ECS scheduler registers the instance:port with the load balancer. For more information, see [Use load balancing to distribute Amazon ECS service traffic](./service-load-balancing.html). | August 11, 2016 @@ -328 +329 @@ Automated Amazon ECS agent updates | Added ability to see the ECS agent version -Amazon ECS service scheduler and ELB integration | Added ability to define a service and associate that service with an ELB load balancer. | April 9, 2015 +Amazon ECS service scheduler and Elastic Load Balancing integration | Added ability to define a service and associate that service with an Elastic Load Balancing load balancer. | April 9, 2015