AWS Security ChangesHomeSearch

AWS systems-manager documentation change

Service: systems-manager · 2026-05-04 · Documentation low

File: systems-manager/latest/userguide/example_ecs_GettingStarted_018_section.md

Summary

Added comprehensive resource tagging throughout ECS setup (cluster, key pairs, security groups, roles, instances, task definitions)

Security assessment

Implements consistent tagging for resource organization. Tags don't alter security configurations or address vulnerabilities, though they aid in resource management for operational teams.

Diff

diff --git a/systems-manager/latest/userguide/example_ecs_GettingStarted_018_section.md b/systems-manager/latest/userguide/example_ecs_GettingStarted_018_section.md
index 437edfb12..a8ae8cb08 100644
--- a//systems-manager/latest/userguide/example_ecs_GettingStarted_018_section.md
+++ b//systems-manager/latest/userguide/example_ecs_GettingStarted_018_section.md
@@ -50,0 +51,4 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+    # Tags
+    PROJECT_TAG="doc-smith"
+    TUTORIAL_TAG="ecs-ec2"
+    
@@ -240 +244 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        CLUSTER_ARN=$(aws ecs create-cluster --cluster-name "$CLUSTER_NAME" --query 'cluster.clusterArn' --output text)
+        CLUSTER_ARN=$(aws ecs create-cluster --cluster-name "$CLUSTER_NAME" --tags key=project,value=$PROJECT_TAG key=tutorial,value=$TUTORIAL_TAG --query 'cluster.clusterArn' --output text)
@@ -262,0 +267,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        
+        aws ec2 create-tags --resources "$KEY_PAIR_NAME" --tags Key=project,Value=$PROJECT_TAG Key=tutorial,Value=$TUTORIAL_TAG 2>>"$LOG_FILE" || log "WARNING: Failed to tag key pair"
@@ -272,0 +279 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            --tag-specifications "ResourceType=security-group,Tags=[{Key=project,Value=$PROJECT_TAG},{Key=tutorial,Value=$TUTORIAL_TAG}]" \
@@ -344,0 +352,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            aws iam tag-role --role-name ecsInstanceRole --tags Key=project,Value=$PROJECT_TAG Key=tutorial,Value=$TUTORIAL_TAG
+            
@@ -396 +405 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=ecs-tutorial-instance}]" \
+            --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=ecs-tutorial-instance},{Key=project,Value=$PROJECT_TAG},{Key=tutorial,Value=$TUTORIAL_TAG}]" \
@@ -474 +483,11 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        "networkMode": "bridge"
+        "networkMode": "bridge",
+        "tags": [
+            {
+                "key": "project",
+                "value": "PROJECT_TAG_PLACEHOLDER"
+            },
+            {
+                "key": "tutorial",
+                "value": "TUTORIAL_TAG_PLACEHOLDER"
+            }
+        ]
@@ -480,0 +500,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        sed -i "s|PROJECT_TAG_PLACEHOLDER|$PROJECT_TAG|g" task-definition.json
+        sed -i "s|TUTORIAL_TAG_PLACEHOLDER|$TUTORIAL_TAG|g" task-definition.json
@@ -514,0 +536 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            --tags key=project,value=$PROJECT_TAG key=tutorial,value=$TUTORIAL_TAG \