AWS cli documentation change
Summary
Updated AWS CLI version references and added clarifications: 1) Compute environments must be created in ENABLED state, 2) allocationStrategy parameter requirements for EKS/ECS, 3) service-linked role behavior for MANAGED vs UNMANAGED environments.
Security assessment
The change adds documentation about security best practices by emphasizing explicit serviceRole requirements for UNMANAGED compute environments. This promotes secure configuration through explicit role assignment rather than implicit permissions, reducing potential over-privileged access risks.
Diff
diff --git a/cli/latest/reference/batch/create-compute-environment.md b/cli/latest/reference/batch/create-compute-environment.md index 535b5789c..2e741d81b 100644 --- a//cli/latest/reference/batch/create-compute-environment.md +++ b//cli/latest/reference/batch/create-compute-environment.md @@ -15 +15 @@ - * [AWS CLI 2.34.49 Command Reference](../../index.html) » + * [AWS CLI 2.34.52 Command Reference](../../index.html) » @@ -127 +127,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/batch- -> The state of the compute environment. If the state is `ENABLED` , then the compute environment accepts jobs from a queue and can scale out automatically based on queues. +> The state of the compute environment. A compute environment must be created in the `ENABLED` state. +> +> If the state is `ENABLED` , then the compute environment accepts jobs from a queue and can scale out automatically based on queues. @@ -184,0 +187,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/batch- +>> ### Note +>> +>> This parameter is required for Amazon EKS compute environments. For Amazon ECS compute environments, if this parameter isn’t specified, the `BEST_FIT` allocation strategy is used by default. +>> @@ -698,0 +705,2 @@ JSON Syntax: +> This automatic service-linked role creation only applies to `MANAGED` compute environments. For `UNMANAGED` compute environments, you must explicitly specify a `serviceRole` . +> @@ -1032 +1040 @@ computeEnvironmentArn -> (string) - * [AWS CLI 2.34.49 Command Reference](../../index.html) » + * [AWS CLI 2.34.52 Command Reference](../../index.html) »