AWS AmazonECS documentation change
Summary
Added new section 'Understanding managed instances' covering identification, visibility settings, and operational details
Security assessment
Documents security-relevant visibility controls (hidden-by-default instances) and identification methods for managed resources. No specific vulnerability is addressed, but it adds security feature documentation.
Diff
diff --git a/AmazonECS/latest/developerguide/managed-instances-security.md b/AmazonECS/latest/developerguide/managed-instances-security.md index 893961e96..49054ff04 100644 --- a//AmazonECS/latest/developerguide/managed-instances-security.md +++ b//AmazonECS/latest/developerguide/managed-instances-security.md @@ -7 +7 @@ -Security modelSecurity featuresCompliance and regulatory supportAmazon ECS Managed Instances FIPS-140 ConsiderationsDisable FIPS on Amazon ECS Managed InstancesSecurity considerationsSecurity best practices +Security modelUnderstanding managed instancesSecurity featuresCompliance and regulatory supportAmazon ECS Managed Instances FIPS-140 ConsiderationsDisable FIPS on Amazon ECS Managed InstancesSecurity considerationsSecurity best practices @@ -27,0 +28,19 @@ Amazon ECS Managed Instances implements a comprehensive security model that bala +## Understanding managed instances + +Amazon ECS Managed Instances provisions EC2 managed instances in your account. As the designated operator, Amazon ECS manages the full lifecycle of these instances on your behalf, including provisioning, scaling, patching, and termination. You do not have permissions to directly terminate these instances or modify instance settings. For more information, see [Amazon EC2 managed instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/amazon-ec2-managed-instances.html). + +### Identifying managed instances + +You can identify Amazon ECS Managed Instances in your account by using the following indicators: + + * The `Operator` field in the Amazon EC2 `DescribeInstances` response, with a value of `ecs.amazonaws.com`. + + * The `aws:ec2:managed-launch` tag on the instance, with a value of `ecs-managed-instances`. + + + + +### Managed resource visibility + +Beginning April 22, 2026, Amazon EC2 hides new managed instances from your Amazon EC2 console views and API list operations by default. Visibility settings do not affect billing or resource operation, and managed instances remain fully operational and billable regardless of visibility configuration. You can adjust this behavior at any time. For more information, see [Managed resource visibility settings](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/amazon-ec2-managed-instances.html#managed-resource-visibility-settings). +