AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-19 · Documentation low

File: cli/latest/reference/ecs/create-express-gateway-service.md

Summary

Added support for task definition ARNs and made execution role/container optional

Security assessment

Enhances service configuration flexibility but doesn't address security vulnerabilities or document security features. Changes focus on operational parameters.

Diff

diff --git a/cli/latest/reference/ecs/create-express-gateway-service.md b/cli/latest/reference/ecs/create-express-gateway-service.md
index ce58ae950..1a832348f 100644
--- a//cli/latest/reference/ecs/create-express-gateway-service.md
+++ b//cli/latest/reference/ecs/create-express-gateway-service.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -71 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20
-    --execution-role-arn <value>
+    [--execution-role-arn <value>]
@@ -76 +76 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20
-    --primary-container <value>
+    [--primary-container <value>]
@@ -82,0 +83 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20
+    [--task-definition-arn <value>]
@@ -110 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20
-`--execution-role-arn` (string) [required]
+`--execution-role-arn` (string)
@@ -138 +139 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20
-`--primary-container` (structure) [required]
+`--primary-container` (structure)
@@ -424,0 +426,8 @@ JSON Syntax:
+`--task-definition-arn` (string)
+
+> The Amazon Resource Name (ARN) of a task definition to use to create the Express Gateway service. This allows you to manage your own task definition, giving you more control over the service configuration such as adding sidecar containers.
+> 
+> The task definition must have a container named `Main` with a single TCP port mapping that includes a container port and port name. The task definition must also have `FARGATE` compatibility.
+> 
+> If you provide a task definition ARN, you cannot also specify `primaryContainer` , `executionRoleArn` , `taskRoleArn` , `cpu` , or `memory` .
+
@@ -605,0 +615,4 @@ service -> (structure)
+>>> taskDefinitionArn -> (string)
+>>>
+>>>> The ARN of the task definition used by this service revision. This is present for all Express services and reflects the task definition in use, whether managed by Amazon ECS or provided by the customer.
+>>> 
@@ -843 +856 @@ service -> (structure)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »