AWS cli documentation change
Summary
Updated AWS CLI version from 2.34.25 to 2.34.28 and added documentation for new S3 Files volume configuration in ECS task definitions, including s3filesVolumeConfiguration structure with fileSystemArn, rootDirectory, transitEncryptionPort, and accessPointArn parameters.
Security assessment
This change documents a new feature (S3 Files volume configuration) rather than addressing a security vulnerability. The documentation includes security-related parameters like transitEncryptionPort for encrypted data transfer and accessPointArn for controlled access, but there's no evidence this is fixing an existing security issue. The change appears to be routine feature documentation with security considerations for the new feature.
Diff
diff --git a/cli/latest/reference/ecs/describe-task-definition.md b/cli/latest/reference/ecs/describe-task-definition.md index 686762521..7b99e7b71 100644 --- a//cli/latest/reference/ecs/describe-task-definition.md +++ b//cli/latest/reference/ecs/describe-task-definition.md @@ -15 +15 @@ - * [AWS CLI 2.34.25 Command Reference](../../index.html) » + * [AWS CLI 2.34.28 Command Reference](../../index.html) » @@ -1534 +1534 @@ taskDefinition -> (structure) ->>> The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a `name` and one of either `configuredAtLaunch` , `dockerVolumeConfiguration` , `efsVolumeConfiguration` , `fsxWindowsFileServerVolumeConfiguration` , or `host` . If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html) . +>>> The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a `name` and one of either `configuredAtLaunch` , `dockerVolumeConfiguration` , `efsVolumeConfiguration` , `s3filesVolumeConfiguration` , `fsxWindowsFileServerVolumeConfiguration` , or `host` . If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html) . @@ -1544,0 +1545,2 @@ taskDefinition -> (structure) +>>>> +>>>> When a volume is using the `s3filesVolumeConfiguration` , the name is required. @@ -1655,0 +1658,24 @@ taskDefinition -> (structure) +>>> +>>> s3filesVolumeConfiguration -> (structure) +>>> +>>>> This parameter is specified when you use an Amazon S3 Files file system for task storage. +>>>> +>>>> fileSystemArn -> (string) [required] +>>>> +>>>>> The full ARN of the S3 Files file system to mount. +>>>> +>>>> rootDirectory -> (string) +>>>> +>>>>> The directory within the Amazon S3 Files file system to mount as the root directory. If this parameter is omitted, the root of the Amazon S3 Files file system will be used. Specifying `/` will have the same effect as omitting this parameter. +>>>>> +>>>>> ### Warning +>>>>> +>>>>> If a S3 Files access point is specified in the `accessPointArn` , the root directory parameter must either be omitted or set to `/` which will enforce the path set on the S3 Files access point. +>>>> +>>>> transitEncryptionPort -> (integer) +>>>> +>>>>> The port to use for sending encrypted data between the ECS host and the S3 Files file system. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon S3 Files mount helper uses. For more information, see [S3 Files mount helper](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-mounting.html) . +>>>> +>>>> accessPointArn -> (string) +>>>> +>>>>> The full ARN of the S3 Files access point to use. If an access point is specified, the root directory value specified in the `S3FilesVolumeConfiguration` must either be omitted or set to `/` which will enforce the path set on the S3 Files access point. For more information, see [Creating S3 Files access points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-access-points-creating.html) . @@ -2072 +2098 @@ tags -> (list) - * [AWS CLI 2.34.25 Command Reference](../../index.html) » + * [AWS CLI 2.34.28 Command Reference](../../index.html) »