AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-05-04 · Documentation low

File: AmazonCloudWatch/latest/logs/example_ecs_ServiceConnect_085_section.md

Summary

Added resource tagging throughout the tutorial (security groups, log groups, IAM roles, ECS cluster, task definitions) and automated cleanup confirmation. Updated a DeleteService API link reference.

Security assessment

The changes primarily add resource tags for organizational purposes and modify cleanup behavior. No security vulnerabilities, weaknesses, or incidents are addressed. Tagging improvements support resource management but don't constitute security documentation or mitigate specific threats.

Diff

diff --git a/AmazonCloudWatch/latest/logs/example_ecs_ServiceConnect_085_section.md b/AmazonCloudWatch/latest/logs/example_ecs_ServiceConnect_085_section.md
index 5e39fd9b2..0048c4fe0 100644
--- a//AmazonCloudWatch/latest/logs/example_ecs_ServiceConnect_085_section.md
+++ b//AmazonCloudWatch/latest/logs/example_ecs_ServiceConnect_085_section.md
@@ -171 +171,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            --vpc-id "$VPC_ID" 2>&1)
+            --vpc-id "$VPC_ID" \
+            --tag-specifications 'ResourceType=security-group,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-ecs-service-connect}]' 2>&1)
@@ -198 +199 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        aws logs create-log-group --log-group-name "/ecs/service-connect-nginx" 2>&1 | grep -v "ResourceAlreadyExistsException" || {
+        aws logs create-log-group --log-group-name "/ecs/service-connect-nginx" --tags project=doc-smith,tutorial=amazon-ecs-service-connect 2>&1 | grep -v "ResourceAlreadyExistsException" || {
@@ -208 +209 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        aws logs create-log-group --log-group-name "/ecs/service-connect-proxy" 2>&1 | grep -v "ResourceAlreadyExistsException" || {
+        aws logs create-log-group --log-group-name "/ecs/service-connect-proxy" --tags project=doc-smith,tutorial=amazon-ecs-service-connect 2>&1 | grep -v "ResourceAlreadyExistsException" || {
@@ -225 +226 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            --tags key=Environment,value=tutorial 2>&1)
+            --tags key=Environment,value=tutorial key=project,value=doc-smith key=tutorial,value=amazon-ecs-service-connect 2>&1)
@@ -268,0 +270 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            aws iam tag-role --role-name ecsTaskExecutionRole --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-ecs-service-connect
@@ -299,0 +302 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            aws iam tag-role --role-name ecsTaskRole --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-ecs-service-connect
@@ -403,0 +407,8 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            },
+            {
+                "key": "project",
+                "value": "doc-smith"
+            },
+            {
+                "key": "tutorial",
+                "value": "amazon-ecs-service-connect"
@@ -611 +622 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        read -r CLEANUP_CHOICE
+        CLEANUP_CHOICE="y"
@@ -656 +667 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    * [DeleteService](https://docs.aws.amazon.com/goto/aws-cli/ecs-2014-11-13/DeleteService)
+    * [DeleteService](https://docs.aws.amazon.com/goto/aws-cli/servicediscovery-2017-03-14/DeleteService)