AWS cli: Image Builder update-infrastructure-configuration: new instance options
Summary
Adds the --terminate-instance-on-completion boolean and the --parent-instance structure (autoScalingGroup name, capacityWaitTimeoutSeconds) to the update-infrastructure-configuration CLI reference, with shorthand/JSON syntax and a note on the execution role permissions required to use an Auto Scaling group instance. Also bumps the CLI version footer to 2.38.1.
Security assessment
Mirrors the create command change: new parent-instance/terminate-instance-on-completion parameters plus documentation of the IAM permissions the execution role requires. This is permission/least-privilege guidance for a new feature rather than a fix for a specific weakness, so it is security-adjacent but low severity.
Evidence
+> To use this feature, the execution role for the build must have permissions to describe the Auto Scaling group, tag the instance while it’s still in the group, and detach it from the group. For more information, see [Build on an instance from an Auto Scaling group](https://docs.aws.amazon.com/imagebuilder/latest/userguide/infra-config-parent-instance.html) in the _EC2 Image Builder User Guide_ .
Diff
diff --git a/cli/latest/reference/imagebuilder/update-infrastructure-configuration.md b/cli/latest/reference/imagebuilder/update-infrastructure-configuration.md index 0412338..92058a4 100644 --- a//cli/latest/reference/imagebuilder/update-infrastructure-configuration.md +++ b//cli/latest/reference/imagebuilder/update-infrastructure-configuration.md @@ -15 +15 @@ - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) » @@ -80,0 +81 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb + [--terminate-instance-on-completion | --no-terminate-instance-on-completion] @@ -84,0 +86 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb + [--parent-instance <value>] @@ -247,0 +250,4 @@ JSON Syntax: +`--terminate-instance-on-completion` | `--no-terminate-instance-on-completion` (boolean) + +> Specifies whether Image Builder terminates build and test instances when image creation ends without a failure (success, cancellation, or expiration). Defaults to `true` . + @@ -423,0 +430,49 @@ JSON Syntax: +`--parent-instance` (structure) + +> The Amazon EC2 Auto Scaling group that Image Builder takes the build instance from, instead of launching a new instance. This applies only to the build phase. +> +> To use this feature, the execution role for the build must have permissions to describe the Auto Scaling group, tag the instance while it’s still in the group, and detach it from the group. For more information, see [Build on an instance from an Auto Scaling group](https://docs.aws.amazon.com/imagebuilder/latest/userguide/infra-config-parent-instance.html) in the _EC2 Image Builder User Guide_ . +> +> autoScalingGroup -> (structure) [required] +> +>> The Amazon EC2 Auto Scaling group that Image Builder takes the build instance from. This is required when you specify `parentInstance` . +>> +>> name -> (string) [required] +>> +>>> The name of the Auto Scaling group, in the same account and Amazon Web Services Region as the infrastructure configuration. To specify a group, you must have permissions to describe it. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> + +>> +>> capacityWaitTimeoutSeconds -> (integer) +>> +>>> The number of seconds that Image Builder waits for an instance to become available in the group before the build fails. If you set this value to 0 or omit it, the build fails as soon as the group has no instance available. +>>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `3600` +>>> + + +Shorthand Syntax: + + + autoScalingGroup={name=string,capacityWaitTimeoutSeconds=integer} + + +JSON Syntax: + + + { + "autoScalingGroup": { + "name": "string", + "capacityWaitTimeoutSeconds": integer + } + } + + @@ -642 +697 @@ infrastructureConfigurationArn -> (string) - * [AWS CLI 2.38.0 Command Reference](../../index.html) » + * [AWS CLI 2.38.1 Command Reference](../../index.html) »