AWS cli: Image Builder create-infrastructure-configuration: new instance options
Summary
Adds the --terminate-instance-on-completion boolean and the --parent-instance structure (autoScalingGroup name, capacityWaitTimeoutSeconds) to the create-infrastructure-configuration CLI reference, including shorthand/JSON syntax and a note that the build execution role needs permissions to describe the Auto Scaling group, tag the instance, and detach it from the group. Also bumps the CLI version footer to 2.38.1.
Security assessment
The change is a feature/API-surface documentation update, but it explicitly documents the IAM permissions the build execution role must hold (describe ASG, tag instance, detach from group) to reuse an Auto Scaling group instance, which is least-privilege permission guidance for a new capability. No vulnerability, CVE, or credential/encryption change is referenced.
Evidence
+> To use this feature, the execution role for the build must have permissions to describe the Auto Scaling group, tag the instance while it’s still in the group, and detach it from the group. For more information, see [Build on an instance from an Auto Scaling group](https://docs.aws.amazon.com/imagebuilder/latest/userguide/infra-config-parent-instance.html) in the _EC2 Image Builder User Guide_ .
Diff
diff --git a/cli/latest/reference/imagebuilder/create-infrastructure-configuration.md b/cli/latest/reference/imagebuilder/create-infrastructure-configuration.md index 4fdaf01..40a5708 100644 --- a//cli/latest/reference/imagebuilder/create-infrastructure-configuration.md +++ b//cli/latest/reference/imagebuilder/create-infrastructure-configuration.md @@ -15 +15 @@ - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) » @@ -76,0 +77 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb + [--terminate-instance-on-completion | --no-terminate-instance-on-completion] @@ -81,0 +83 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb + [--parent-instance <value>] @@ -245,0 +248,4 @@ JSON Syntax: +`--terminate-instance-on-completion` | `--no-terminate-instance-on-completion` (boolean) + +> Specifies whether Image Builder terminates build and test instances when image creation ends without a failure (success, cancellation, or expiration). Defaults to `true` . + @@ -463,0 +470,49 @@ JSON Syntax: +`--parent-instance` (structure) + +> The Amazon EC2 Auto Scaling group that Image Builder takes the build instance from, instead of launching a new instance. This applies only to the build phase. +> +> To use this feature, the execution role for the build must have permissions to describe the Auto Scaling group, tag the instance while it’s still in the group, and detach it from the group. For more information, see [Build on an instance from an Auto Scaling group](https://docs.aws.amazon.com/imagebuilder/latest/userguide/infra-config-parent-instance.html) in the _EC2 Image Builder User Guide_ . +> +> autoScalingGroup -> (structure) [required] +> +>> The Amazon EC2 Auto Scaling group that Image Builder takes the build instance from. This is required when you specify `parentInstance` . +>> +>> name -> (string) [required] +>> +>>> The name of the Auto Scaling group, in the same account and Amazon Web Services Region as the infrastructure configuration. To specify a group, you must have permissions to describe it. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> + +>> +>> capacityWaitTimeoutSeconds -> (integer) +>> +>>> The number of seconds that Image Builder waits for an instance to become available in the group before the build fails. If you set this value to 0 or omit it, the build fails as soon as the group has no instance available. +>>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `3600` +>>> + + +Shorthand Syntax: + + + autoScalingGroup={name=string,capacityWaitTimeoutSeconds=integer} + + +JSON Syntax: + + + { + "autoScalingGroup": { + "name": "string", + "capacityWaitTimeoutSeconds": integer + } + } + + @@ -689 +744 @@ infrastructureConfigurationArn -> (string) - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) »