AWS cli documentation change
Summary
Updated AWS CLI version from 2.34.34 to 2.34.37 and added documentation for new S3Files volume configuration parameters (fileSystemArn, rootDirectory, transitEncryptionPort, accessPointArn) and container timeout parameters (startTimeout, stopTimeout).
Security assessment
The change adds documentation for transitEncryptionPort parameter which is specifically for sending encrypted data between ECS host and S3Files file system server, indicating encryption in transit is available for this feature. However, there is no evidence this addresses a specific security vulnerability or incident - it appears to be routine documentation of new features. The addition of timeout parameters (startTimeout, stopTimeout) could have security implications for container lifecycle management but is not directly addressing a known security issue.
Diff
diff --git a/cli/latest/reference/batch/describe-jobs.md b/cli/latest/reference/batch/describe-jobs.md index fe82e9d01..41675315a 100644 --- a//cli/latest/reference/batch/describe-jobs.md +++ b//cli/latest/reference/batch/describe-jobs.md @@ -15 +15 @@ - * [AWS CLI 2.34.34 Command Reference](../../index.html) » + * [AWS CLI 2.34.37 Command Reference](../../index.html) » @@ -653,0 +654,20 @@ jobs -> (list) +>>>>> +>>>>> s3filesVolumeConfiguration -> (structure) +>>>>> +>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>> +>>>>>> fileSystemArn -> (string) [required] +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>> +>>>>>> rootDirectory -> (string) +>>>>>> +>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>> +>>>>>> transitEncryptionPort -> (integer) +>>>>>> +>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>> +>>>>>> accessPointArn -> (string) +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -1414,0 +1435,20 @@ jobs -> (list) +>>>>>>>> +>>>>>>>> s3filesVolumeConfiguration -> (structure) +>>>>>>>> +>>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>>>>> +>>>>>>>>> fileSystemArn -> (string) [required] +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>>>>> +>>>>>>>>> rootDirectory -> (string) +>>>>>>>>> +>>>>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>>>>> +>>>>>>>>> transitEncryptionPort -> (integer) +>>>>>>>>> +>>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>>>>> +>>>>>>>>> accessPointArn -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -2599,0 +2640,8 @@ jobs -> (list) +>>>>>>>>>> +>>>>>>>>>> startTimeout -> (integer) +>>>>>>>>>> +>>>>>>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. +>>>>>>>>>> +>>>>>>>>>> stopTimeout -> (integer) +>>>>>>>>>> +>>>>>>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used. @@ -2770,0 +2819,20 @@ jobs -> (list) +>>>>>>>>>> +>>>>>>>>>> s3filesVolumeConfiguration -> (structure) +>>>>>>>>>> +>>>>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>>>>>>> +>>>>>>>>>>> fileSystemArn -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>>>>>>> +>>>>>>>>>>> rootDirectory -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>>>>>>> +>>>>>>>>>>> transitEncryptionPort -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>>>>>>> +>>>>>>>>>>> accessPointArn -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -4598,0 +4667,8 @@ jobs -> (list) +>>>>>>> startTimeout -> (integer) +>>>>>>> +>>>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. +>>>>>>> +>>>>>>> stopTimeout -> (integer) +>>>>>>> +>>>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used. +>>>>>>> @@ -4794,0 +4871,20 @@ jobs -> (list) +>>>>>>> +>>>>>>> s3filesVolumeConfiguration -> (structure) +>>>>>>> +>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>>>> +>>>>>>>> fileSystemArn -> (string) [required] +>>>>>>>> +>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>>>> +>>>>>>>> rootDirectory -> (string) +>>>>>>>> +>>>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>>>> +>>>>>>>> transitEncryptionPort -> (integer) +>>>>>>>> +>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>>>> +>>>>>>>> accessPointArn -> (string) +>>>>>>>> +>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -4838 +4934 @@ jobs -> (list) - * [AWS CLI 2.34.34 Command Reference](../../index.html) » + * [AWS CLI 2.34.37 Command Reference](../../index.html) »