AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-25 · Documentation low

File: cli/latest/reference/batch/describe-job-definitions.md

Summary

Updated AWS CLI version from 2.34.34 to 2.34.37 and added documentation for new S3Files volume configuration parameters (fileSystemArn, rootDirectory, transitEncryptionPort, accessPointArn) and container timeout parameters (startTimeout, stopTimeout) in job definitions.

Security assessment

The change adds documentation for transitEncryptionPort parameter which enables encrypted data transfer between ECS hosts and S3Files file system servers, indicating support for encryption in transit. However, there is no evidence this addresses a specific security vulnerability or incident - it appears to be routine feature documentation. The addition of timeout parameters (startTimeout, stopTimeout) relates to container lifecycle management but doesn't indicate security fixes.

Diff

diff --git a/cli/latest/reference/batch/describe-job-definitions.md b/cli/latest/reference/batch/describe-job-definitions.md
index a94e42972..a5ce73dbe 100644
--- a//cli/latest/reference/batch/describe-job-definitions.md
+++ b//cli/latest/reference/batch/describe-job-definitions.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
@@ -501,0 +502,20 @@ jobDefinitions -> (list)
+>>>>> 
+>>>>> s3filesVolumeConfiguration -> (structure)
+>>>>>
+>>>>>> This parameter is specified when you’re using an S3Files file system for job storage.
+>>>>>> 
+>>>>>> fileSystemArn -> (string) [required]
+>>>>>>
+>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use.
+>>>>>> 
+>>>>>> rootDirectory -> (string)
+>>>>>>
+>>>>>>> The directory within the S3Files file system to mount as the root directory.
+>>>>>> 
+>>>>>> transitEncryptionPort -> (integer)
+>>>>>>
+>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server.
+>>>>>> 
+>>>>>> accessPointArn -> (string)
+>>>>>>
+>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use.
@@ -1226,0 +1247,20 @@ jobDefinitions -> (list)
+>>>>>>>> 
+>>>>>>>> s3filesVolumeConfiguration -> (structure)
+>>>>>>>>
+>>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage.
+>>>>>>>>> 
+>>>>>>>>> fileSystemArn -> (string) [required]
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use.
+>>>>>>>>> 
+>>>>>>>>> rootDirectory -> (string)
+>>>>>>>>>
+>>>>>>>>>> The directory within the S3Files file system to mount as the root directory.
+>>>>>>>>> 
+>>>>>>>>> transitEncryptionPort -> (integer)
+>>>>>>>>>
+>>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server.
+>>>>>>>>> 
+>>>>>>>>> accessPointArn -> (string)
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use.
@@ -2411,0 +2452,8 @@ jobDefinitions -> (list)
+>>>>>>>>>> 
+>>>>>>>>>> startTimeout -> (integer)
+>>>>>>>>>>
+>>>>>>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds.
+>>>>>>>>>> 
+>>>>>>>>>> stopTimeout -> (integer)
+>>>>>>>>>>
+>>>>>>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used.
@@ -2582,0 +2631,20 @@ jobDefinitions -> (list)
+>>>>>>>>>> 
+>>>>>>>>>> s3filesVolumeConfiguration -> (structure)
+>>>>>>>>>>
+>>>>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage.
+>>>>>>>>>>> 
+>>>>>>>>>>> fileSystemArn -> (string) [required]
+>>>>>>>>>>>
+>>>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use.
+>>>>>>>>>>> 
+>>>>>>>>>>> rootDirectory -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> The directory within the S3Files file system to mount as the root directory.
+>>>>>>>>>>> 
+>>>>>>>>>>> transitEncryptionPort -> (integer)
+>>>>>>>>>>>
+>>>>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server.
+>>>>>>>>>>> 
+>>>>>>>>>>> accessPointArn -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use.
@@ -3772,0 +3841,8 @@ jobDefinitions -> (list)
+>>>>>>> 
+>>>>>>> startTimeout -> (integer)
+>>>>>>>
+>>>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds.
+>>>>>>> 
+>>>>>>> stopTimeout -> (integer)
+>>>>>>>
+>>>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used.
@@ -3943,0 +4020,20 @@ jobDefinitions -> (list)
+>>>>>>> 
+>>>>>>> s3filesVolumeConfiguration -> (structure)
+>>>>>>>
+>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage.
+>>>>>>>> 
+>>>>>>>> fileSystemArn -> (string) [required]
+>>>>>>>>
+>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use.
+>>>>>>>> 
+>>>>>>>> rootDirectory -> (string)
+>>>>>>>>
+>>>>>>>>> The directory within the S3Files file system to mount as the root directory.
+>>>>>>>> 
+>>>>>>>> transitEncryptionPort -> (integer)
+>>>>>>>>
+>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server.
+>>>>>>>> 
+>>>>>>>> accessPointArn -> (string)
+>>>>>>>>
+>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use.
@@ -4505 +4601 @@ nextToken -> (string)
-  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.37 Command Reference](../../index.html) »