AWS cli: Add --gateway-connectors option to ECS create-service CLI reference
Summary
Documents a new --gateway-connectors list parameter for the ECS create-service command, including its structure (portName, healthCheck, filters) and shorthand/JSON syntax. The filters.accessTypes field controls whether gateway ingress paths are PUBLIC or PRIVATE. Also updates navigation links and CLI version to 2.38.3.
Security assessment
The change documents a new gateway connector feature whose filters.accessTypes field distinguishes PUBLIC vs PRIVATE ingress paths, which is a network-exposure control. It is feature documentation rather than a fix for a specific vulnerability, so it is security-adjacent (medium) rather than a patched issue.
Evidence
>>>> * `PUBLIC` \- The ingress path is publicly accessible.
Diff
diff --git a/cli/latest/reference/ecs/create-service.md b/cli/latest/reference/ecs/create-service.md index c5d399f..a2c42ff 100644 --- a//cli/latest/reference/ecs/create-service.md +++ b//cli/latest/reference/ecs/create-service.md @@ -14,2 +14,2 @@ - * [previous](create-express-gateway-service.html "create-express-gateway-service") | - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [previous](create-gateway.html "create-gateway") | + * [AWS CLI 2.38.3 Command Reference](../../index.html) » @@ -22 +22 @@ - * [← create-express-gateway-service](create-express-gateway-service.html "previous chapter \(use the left arrow\)") / + * [← create-gateway](create-gateway.html "previous chapter \(use the left arrow\)") / @@ -158,0 +159 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ecs-20 + [--gateway-connectors <value>] @@ -2020,0 +2022,143 @@ JSON Syntax: +`--gateway-connectors` (list) + +> The gateway connectors that attach the service to a gateway ingress path. You can specify at most one gateway connector. +> +> Constraints: +> +> * min: `0` +> * max: `1` +> + +> +> (structure) +> +>> A gateway connector that attaches an Amazon ECS service to a gateway ingress path. The connector specifies the service port that receives gateway-managed ingress traffic, along with the health check and traffic filters that the gateway applies. A service can have at most one gateway connector. +>> +>> portName -> (string) [required] +>> +>>> The name of the service port that the gateway routes ingress traffic to. +>> +>> healthCheck -> (structure) +>> +>>> The health check that the gateway uses to determine whether the targets for this connector are healthy. +>>> +>>> healthCheckProtocol -> (string) +>>> +>>>> The protocol that the gateway uses to perform health checks. +>>>> +>>>> Valid values: +>>>> +>>>> * `HTTP` \- Health checks are performed over HTTP. +>>>> * `HTTPS` \- Health checks are performed over HTTPS. +>>>> + +>>>> +>>>> Possible values: +>>>> +>>>> * `HTTP` +>>>> * `HTTPS` +>>>> + +>>> +>>> healthCheckPort -> (integer) +>>> +>>>> The port that the gateway uses to perform health checks on the targets. +>>> +>>> healthCheckPath -> (string) +>>> +>>>> The destination path for health check requests. +>>> +>>> healthCheckTimeoutSeconds -> (integer) +>>> +>>>> The amount of time, in seconds, during which no response from a target means a failed health check. +>>> +>>> healthCheckIntervalSeconds -> (integer) +>>> +>>>> The approximate amount of time, in seconds, between health checks of an individual target. +>>> +>>> healthyThresholdCount -> (integer) +>>> +>>>> The number of consecutive successful health checks that a target must pass before the gateway considers it healthy. +>>> +>>> unhealthyThresholdCount -> (integer) +>>> +>>>> The number of consecutive failed health checks that a target must fail before the gateway considers it unhealthy. +>>> +>>> matcher -> (structure) +>>> +>>>> The HTTP or gRPC codes that indicate a successful health check response from a target. +>>>> +>>>> httpCode -> (string) +>>>> +>>>>> The HTTP codes that indicate a successful response from a target. +>>>> +>>>> grpcCode -> (string) +>>>> +>>>>> The gRPC codes that indicate a successful response from a target. +>> +>> filters -> (structure) +>> +>>> The filters that control which gateway ingress paths the connector applies to. +>>> +>>> accessTypes -> (list) +>>> +>>>> The access types of the gateway ingress paths that the connector applies to. +>>>> +>>>> The access type can be one of the following values: +>>>> +>>>> * `PUBLIC` \- The ingress path is publicly accessible. +>>>> * `PRIVATE` \- The ingress path is only accessible privately. +>>>> + +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `2` +>>>> + +>>>> +>>>> (string) +>>>> +>>>>> Specifies whether a resource is publicly accessible from the internet or private to a VPC. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `PUBLIC` +>>>>> * `PRIVATE` +>>>>> + + +Shorthand Syntax: + + + portName=string,healthCheck={healthCheckProtocol=string,healthCheckPort=integer,healthCheckPath=string,healthCheckTimeoutSeconds=integer,healthCheckIntervalSeconds=integer,healthyThresholdCount=integer,unhealthyThresholdCount=integer,matcher={httpCode=string,grpcCode=string}},filters={accessTypes=[string,string]} ... + + +JSON Syntax: + + + [ + { + "portName": "string", + "healthCheck": { + "healthCheckProtocol": "HTTP"|"HTTPS", + "healthCheckPort": integer, + "healthCheckPath": "string", + "healthCheckTimeoutSeconds": integer, + "healthCheckIntervalSeconds": integer, + "healthyThresholdCount": integer, + "unhealthyThresholdCount": integer, + "matcher": { + "httpCode": "string", + "grpcCode": "string" + } + }, + "filters": { + "accessTypes": ["PUBLIC"|"PRIVATE", ...] + } + } + ... + ] + + @@ -4862 +5006 @@ service -> (structure) - * [← create-express-gateway-service](create-express-gateway-service.html "previous chapter \(use the left arrow\)") / + * [← create-gateway](create-gateway.html "previous chapter \(use the left arrow\)") / @@ -4871,2 +5015,2 @@ service -> (structure) - * [previous](create-express-gateway-service.html "create-express-gateway-service") | - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [previous](create-gateway.html "create-gateway") | + * [AWS CLI 2.38.3 Command Reference](../../index.html) »