AWS AmazonECS documentation change
Summary
Added entry about AmazonECSServiceRolePolicy managed IAM policy update to include autoscaling:TerminateInstanceInAutoScalingGroup permission
Security assessment
This documents an update to a managed IAM policy that adds a permission for ECS to terminate EC2 instances that fail to register with clusters. While this is security-related documentation about IAM permissions, there is no evidence it addresses a specific security vulnerability. It adds documentation about a security feature (IAM policy update).
Diff
diff --git a/AmazonECS/latest/developerguide/document_history.md b/AmazonECS/latest/developerguide/document_history.md index 8560d7e7f..f03cc26c5 100644 --- a//AmazonECS/latest/developerguide/document_history.md +++ b//AmazonECS/latest/developerguide/document_history.md @@ -12,0 +13 @@ Change | Description | Date +Add permissions to [AmazonECSServiceRolePolicy](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonECSServiceRolePolicy) managed policy. | The `AmazonECSServiceRolePolicy` managed IAM policy was updated to include the `autoscaling:TerminateInstanceInAutoScalingGroup` permission. This permission allows Amazon ECS to terminate Amazon EC2 instances in customer ASGs that fail to register with the Amazon ECS cluster. | April 24, 2026