AWS AWSCloudFormation documentation change
Summary
Added documentation for IPC and PID namespace modes with 'none' and 'shared' options
Security assessment
Documents namespace isolation features affecting container security boundaries. The 'shared' mode has security implications (reduced isolation), but this is feature documentation not vulnerability-related.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemontaskdefinition.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemontaskdefinition.md index 5c897044b..443dbdb25 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemontaskdefinition.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-ecs-daemontaskdefinition.md @@ -106 +106,5 @@ _Required_ : No -Property description not available. +The IPC resource namespace mode for the containers in the daemon task. The valid values are `none` and `shared`. + +If `shared` is specified, all containers within the daemon task share the same IPC resources. + +If `none` is specified, each container in the daemon task has a private IPC namespace. @@ -111,0 +116,2 @@ _Required_ : No + _Allowed values_ : `none | shared` + @@ -128 +134,5 @@ _Required_ : No -Property description not available. +The process namespace mode for the containers in the daemon task. The valid values are `none` and `shared`. + +If `shared` is specified, all containers within the daemon task share the same process namespace. + +If `none` is specified, each container in the daemon task has a private process namespace. @@ -133,0 +144,2 @@ _Required_ : No + _Allowed values_ : `none | shared` +