AWS cli documentation change
Summary
Added documentation for S3Files volume configuration parameters (fileSystemArn, rootDirectory, transitEncryptionPort, accessPointArn) and container timeout parameters (startTimeout, stopTimeout) in AWS Batch job definitions. Updated AWS CLI version reference from 2.34.34 to 2.34.37.
Security assessment
The change adds documentation for transitEncryptionPort parameter which enables encrypted data transfer between ECS hosts and S3Files file systems, enhancing data-in-transit security. However, there is no evidence this addresses a specific security vulnerability or incident - it appears to be routine feature documentation for new S3Files integration capabilities. The timeout parameters (startTimeout, stopTimeout) help with container lifecycle management but are not explicitly security-focused.
Diff
diff --git a/cli/latest/reference/batch/register-job-definition.md b/cli/latest/reference/batch/register-job-definition.md index 41931e518..ae9daeeee 100644 --- a//cli/latest/reference/batch/register-job-definition.md +++ b//cli/latest/reference/batch/register-job-definition.md @@ -15 +15 @@ - * [AWS CLI 2.34.34 Command Reference](../../index.html) » + * [AWS CLI 2.34.37 Command Reference](../../index.html) » @@ -282,0 +283,20 @@ JSON Syntax: +>>> +>>> s3filesVolumeConfiguration -> (structure) +>>> +>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>> +>>>> fileSystemArn -> (string) [required] +>>>> +>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>> +>>>> rootDirectory -> (string) +>>>> +>>>>> The directory within the S3Files file system to mount as the root directory. +>>>> +>>>> transitEncryptionPort -> (integer) +>>>> +>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>> +>>>> accessPointArn -> (string) +>>>> +>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -871,0 +892,6 @@ JSON Syntax: + }, + "s3filesVolumeConfiguration": { + "fileSystemArn": "string", + "rootDirectory": "string", + "transitEncryptionPort": integer, + "accessPointArn": "string" @@ -1123,0 +1150,20 @@ JSON Syntax: +>>>>>> +>>>>>> s3filesVolumeConfiguration -> (structure) +>>>>>> +>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>>> +>>>>>>> fileSystemArn -> (string) [required] +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>>> +>>>>>>> rootDirectory -> (string) +>>>>>>> +>>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>>> +>>>>>>> transitEncryptionPort -> (integer) +>>>>>>> +>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>>> +>>>>>>> accessPointArn -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -2308,0 +2355,8 @@ JSON Syntax: +>>>>>>>> +>>>>>>>> startTimeout -> (integer) +>>>>>>>> +>>>>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. +>>>>>>>> +>>>>>>>> stopTimeout -> (integer) +>>>>>>>> +>>>>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used. @@ -2479,0 +2534,20 @@ JSON Syntax: +>>>>>>>> +>>>>>>>> s3filesVolumeConfiguration -> (structure) +>>>>>>>> +>>>>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>>>>> +>>>>>>>>> fileSystemArn -> (string) [required] +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>>>>> +>>>>>>>>> rootDirectory -> (string) +>>>>>>>>> +>>>>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>>>>> +>>>>>>>>> transitEncryptionPort -> (integer) +>>>>>>>>> +>>>>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>>>>> +>>>>>>>>> accessPointArn -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -3046,0 +3121,6 @@ JSON Syntax: + }, + "s3filesVolumeConfiguration": { + "fileSystemArn": "string", + "rootDirectory": "string", + "transitEncryptionPort": integer, + "accessPointArn": "string" @@ -3242 +3322,3 @@ JSON Syntax: - "user": "string" + "user": "string", + "startTimeout": integer, + "stopTimeout": integer @@ -3275,0 +3358,6 @@ JSON Syntax: + }, + "s3filesVolumeConfiguration": { + "fileSystemArn": "string", + "rootDirectory": "string", + "transitEncryptionPort": integer, + "accessPointArn": "string" @@ -4830,0 +4919,8 @@ JSON Syntax: +>>>>> +>>>>> startTimeout -> (integer) +>>>>> +>>>>>> Time duration (in seconds) to wait before giving up on resolving dependencies for a container. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. +>>>>> +>>>>> stopTimeout -> (integer) +>>>>> +>>>>>> Time duration (in seconds) to wait before the container is forcefully killed if it doesn’t exit normally on its own. The minimum value is 2 seconds and the maximum value for Fargate is 120 seconds. If the parameter is not specified, the default value of 30 seconds is used. For tasks that use the EC2 launch type, if the `stopTimeout` parameter isn’t specified, the value set for the Amazon ECS container agent configuration variable `ECS_CONTAINER_STOP_TIMEOUT` is used. If neither the `stopTimeout` parameter nor the `ECS_CONTAINER_STOP_TIMEOUT` agent configuration variable are set, then the default value of 30 seconds is used. @@ -5001,0 +5098,20 @@ JSON Syntax: +>>>>> +>>>>> s3filesVolumeConfiguration -> (structure) +>>>>> +>>>>>> This parameter is specified when you’re using an S3Files file system for job storage. +>>>>>> +>>>>>> fileSystemArn -> (string) [required] +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the S3Files file system to use. +>>>>>> +>>>>>> rootDirectory -> (string) +>>>>>> +>>>>>>> The directory within the S3Files file system to mount as the root directory. +>>>>>> +>>>>>> transitEncryptionPort -> (integer) +>>>>>> +>>>>>>> The port to use when sending encrypted data between the Amazon ECS host and the S3Files file system server. +>>>>>> +>>>>>> accessPointArn -> (string) +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the S3Files access point to use. @@ -5107 +5223,3 @@ JSON Syntax: - "user": "string" + "user": "string", + "startTimeout": integer, + "stopTimeout": integer @@ -5140,0 +5259,6 @@ JSON Syntax: + }, + "s3filesVolumeConfiguration": { + "fileSystemArn": "string", + "rootDirectory": "string", + "transitEncryptionPort": integer, + "accessPointArn": "string" @@ -5355 +5479 @@ revision -> (integer) - * [AWS CLI 2.34.34 Command Reference](../../index.html) » + * [AWS CLI 2.34.37 Command Reference](../../index.html) »