AWS AWSCloudFormation documentation change
Summary
Added CapacityReservations support and FIPS 140-2 cryptographic module configuration for EC2 instances
Security assessment
The addition of FIPS 140-2 documentation explicitly describes enhanced cryptographic compliance, but there is no evidence of addressing a specific security vulnerability. This adds security feature documentation.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-capacityprovider-instancelaunchtemplate.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-capacityprovider-instancelaunchtemplate.md index b6edfe2cc..05fd05502 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-capacityprovider-instancelaunchtemplate.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-ecs-capacityprovider-instancelaunchtemplate.md @@ -19,0 +20 @@ To declare this entity in your CloudFormation template, use the following syntax + "CapacityReservations" : [CapacityReservationRequest](./aws-properties-ecs-capacityprovider-capacityreservationrequest.html), @@ -32,0 +34,2 @@ To declare this entity in your CloudFormation template, use the following syntax + CapacityReservations: + [CapacityReservationRequest](./aws-properties-ecs-capacityprovider-capacityreservationrequest.html) @@ -49 +52 @@ To declare this entity in your CloudFormation template, use the following syntax -The capacity option type. This determines whether Amazon ECS launches On-Demand or Spot Instances for your managed instance capacity provider. +The capacity option type. This determines whether Amazon ECS launches On-Demand, Spot or Capacity Reservation Instances for your managed instance capacity provider. @@ -56,0 +60,2 @@ Valid values are: + * `RESERVED` \- Launches Instances using Amazon EC2 Capacity Reservations. Capacity Reservations allow you to reserve compute capacity for Amazon EC2 instances in a specific Availability Zone. + @@ -68 +73 @@ _Required_ : No - _Allowed values_ : `ON_DEMAND | SPOT` + _Allowed values_ : `ON_DEMAND | SPOT | RESERVED` @@ -71,0 +77,20 @@ _Required_ : No +`CapacityReservations` + + +Capacity reservation specifications. You can specify: + + * Capacity reservation preference + + * Reservation resource group to be used for targeted capacity reservations + + + + +Amazon ECS will launch instances according to the specified criteria. + +_Required_ : No + + _Type_ : [CapacityReservationRequest](./aws-properties-ecs-capacityprovider-capacityreservationrequest.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -88 +113,3 @@ _Required_ : Yes -Property description not available. +Determines whether to enable FIPS 140-2 validated cryptographic modules on EC2 instances launched by the capacity provider. If `true`, instances use FIPS-compliant cryptographic algorithms and modules for enhanced security compliance. If `false`, instances use standard cryptographic implementations. + +If not specified, instances are launched with FIPS enabled in AWS GovCloud (US) regions and FIPS disabled in other regions.