aws-sdk-ecs 1.113.0 → 1.115.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a76ffb05a916f4f3f5ccd7fec5cbc2e06e8fb1c39f8e62066877416fd0d5e853
-  data.tar.gz: 61381602f6d9cdb9733bfabd38ddac65a0322afd32b59ebf072984c86471a5dc
+  metadata.gz: 3ca30e3806f75411b24b361c388cdb2009426d17f9de6da79fd1e71af4886b0b
+  data.tar.gz: 24955861fac0e68d2ad944d2b37edfc3bd21d9b9805b3b36571ae56b3da23096
 SHA512:
-  metadata.gz: 7bb1494e02873743999bbea2dcddefed53ee93a42a0258fcfde18ff55880441a510751c5b5131750fa30f6c1406b8917111019353414d5d374b5f86491dbdfea
-  data.tar.gz: 636e49a6438e17287d95dccd965c853c468827cf927bba3c25061d44e3dc7b08005b161838eacea58b2d5bab9afa0b348752a7c0c05fa9b1866b83000dd60bab
+  metadata.gz: e2049b552727eac77b8e7913b1c5e577842212ee06d596e3e1f7222b1aae807942a5f7a2a538961343b384d577b2a7b75f12928826597dfafee590fde0bc2ca4
+  data.tar.gz: 550f9502d73c6c4fab93bb92bc6d7553249905566c9886731d829ab5b8eae50a22fe391bfa7d5bfda055386a387553115ea678ae9c9d481a88d80915532f291e

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.115.0 (2023-04-19)
+------------------
+
+* Feature - This release supports the Account Setting "TagResourceAuthorization" that allows for enhanced Tagging security controls.
+
+1.114.0 (2023-04-14)
+------------------
+
+* Feature - This release supports  ephemeral storage for AWS Fargate Windows containers.
+
 1.113.0 (2023-04-10)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.113.0
+1.115.0

data/lib/aws-sdk-ecs/client.rb

@@ -1887,13 +1887,13 @@ module Aws::ECS
     # @example Request syntax with placeholder values
     #
     #   resp = client.delete_account_setting({
-    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode
+    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
     #     principal_arn: "String",
     #   })
     #
     # @example Response structure
     #
-    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode"
+    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
     #   resp.setting.value #=> String
     #   resp.setting.principal_arn #=> String
     #
@@ -4534,7 +4534,7 @@ module Aws::ECS
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_account_settings({
-    #     name: "serviceLongArnFormat", # accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode
+    #     name: "serviceLongArnFormat", # accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
     #     value: "String",
     #     principal_arn: "String",
     #     effective_settings: false,
@@ -4545,7 +4545,7 @@ module Aws::ECS
     # @example Response structure
     #
     #   resp.settings #=> Array
-    #   resp.settings[0].name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode"
+    #   resp.settings[0].name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
     #   resp.settings[0].value #=> String
     #   resp.settings[0].principal_arn #=> String
     #   resp.next_token #=> String
@@ -5440,11 +5440,21 @@ module Aws::ECS
     # see [CloudWatch Container Insights][3] in the *Amazon Elastic
     # Container Service Developer Guide*.
     #
+    # Amazon ECS is introducing tagging authorization for resource creation.
+    # Users must have permissions for actions that create the resource, such
+    # as `ecsCreateCluster`. If tags are specified when you create a
+    # resource, Amazon Web Services performs additional authorization to
+    # verify if users or roles have permissions to create tags. Therefore,
+    # you must grant explicit permissions to use the `ecs:TagResource`
+    # action. For more information, see [Grant permission to tag resources
+    # on creation][4] in the *Amazon ECS Developer Guide*.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html
     # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-eni.html
     # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html
+    # [4]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/supported-iam-actions-tagging.html
     #
     # @option params [required, String] :name
     #   The Amazon ECS resource name for which to modify the account setting.
@@ -5458,7 +5468,14 @@ module Aws::ECS
     #   `containerInsights` is specified, the default setting for Amazon Web
     #   Services CloudWatch Container Insights for your clusters is affected.
     #   If `fargateFIPSMode` is specified, Fargate FIPS 140 compliance is
-    #   affected.
+    #   affected. If `tagResourceAuthorization` is specified, the opt-in
+    #   option for tagging resources on creation is affected. For information
+    #   about the opt-in timeline, see [Tagging authorization timeline][1] in
+    #   the *Amazon ECS Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
     #
     # @option params [required, String] :value
     #   The account setting value for the specified principal ARN. Accepted
@@ -5525,14 +5542,14 @@ module Aws::ECS
     # @example Request syntax with placeholder values
     #
     #   resp = client.put_account_setting({
-    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode
+    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
     #     value: "String", # required
     #     principal_arn: "String",
     #   })
     #
     # @example Response structure
     #
-    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode"
+    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
     #   resp.setting.value #=> String
     #   resp.setting.principal_arn #=> String
     #
@@ -5559,18 +5576,22 @@ module Aws::ECS
     #   `awsvpcTrunking` is specified, the ENI limit for your Amazon ECS
     #   container instances is affected. If `containerInsights` is specified,
     #   the default setting for Amazon Web Services CloudWatch Container
-    #   Insights for your clusters is affected.
+    #   Insights for your clusters is affected. If `tagResourceAuthorization`
+    #   is specified, the opt-in option for tagging resources on creation is
+    #   affected. For information about the opt-in timeline, see [Tagging
+    #   authorization timeline][1] in the *Amazon ECS Developer Guide*.
     #
     #   When you specify `fargateFIPSMode` for the `name` and `enabled` for
     #   the `value`, Fargate uses FIPS-140 compliant cryptographic algorithms
     #   on your tasks. For more information about FIPS-140 compliance with
     #   Fargate, see [ Amazon Web Services Fargate Federal Information
-    #   Processing Standard (FIPS) 140-2 compliance][1] in the *Amazon Elastic
+    #   Processing Standard (FIPS) 140-2 compliance][2] in the *Amazon Elastic
     #   Container Service Developer Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSEC2ContainerServiceDocs/build/server-root/AmazonECS/latest/developerguide/ecs-fips-compliance.html
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
+    #   [2]: https://docs.aws.amazon.com/AWSEC2ContainerServiceDocs/build/server-root/AmazonECS/latest/developerguide/ecs-fips-compliance.html
     #
     # @option params [required, String] :value
     #   The account setting value for the specified principal ARN. Accepted
@@ -5604,13 +5625,13 @@ module Aws::ECS
     # @example Request syntax with placeholder values
     #
     #   resp = client.put_account_setting_default({
-    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode
+    #     name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
     #     value: "String", # required
     #   })
     #
     # @example Response structure
     #
-    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode"
+    #   resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
     #   resp.setting.value #=> String
     #   resp.setting.principal_arn #=> String
     #
@@ -6336,7 +6357,7 @@ module Aws::ECS
     #
     #    * Linux platform version `1.4.0` or later.
     #
-    #   ^
+    #   * Windows platform version `1.0.0` or later.
     #
     #    </note>
     #
@@ -7382,8 +7403,8 @@ module Aws::ECS
     #
     # @option params [Boolean] :enable_execute_command
     #   Whether or not the execute command functionality is turned on for the
-    #   task. If `true`, this enables execute command functionality on all
-    #   containers in the task.
+    #   task. If `true`, this turns on the execute command functionality on
+    #   all containers in the task.
     #
     # @option params [String] :group
     #   The name of the task group to associate with the task. The default
@@ -9683,7 +9704,7 @@ module Aws::ECS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ecs'
-      context[:gem_version] = '1.113.0'
+      context[:gem_version] = '1.115.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ecs/types.rb

@@ -1624,42 +1624,47 @@ module Aws::ECS
     #   @return [Array<Types::HostEntry>]
     #
     # @!attribute [rw] docker_security_options
-    #   A list of strings to provide custom labels for SELinux and AppArmor
-    #   multi-level security systems. This field isn't valid for containers
-    #   in tasks using the Fargate launch type.
+    #   A list of strings to provide custom configuration for multiple
+    #   security systems. For more information about valid values, see
+    #   [Docker Run Security Configuration][1]. This field isn't valid for
+    #   containers in tasks using the Fargate launch type.
     #
-    #   With Windows containers, this parameter can be used to reference a
-    #   credential spec file when configuring a container for Active
+    #   For Linux tasks on EC2, this parameter can be used to reference
+    #   custom labels for SELinux and AppArmor multi-level security systems.
+    #
+    #   For any tasks on EC2, this parameter can be used to reference a
+    #   credential spec file that configures a container for Active
     #   Directory authentication. For more information, see [Using gMSAs for
-    #   Windows Containers][1] in the *Amazon Elastic Container Service
-    #   Developer Guide*.
+    #   Windows Containers][2] and [Using gMSAs for Linux Containers][3] in
+    #   the *Amazon Elastic Container Service Developer Guide*.
     #
-    #   This parameter maps to `SecurityOpt` in the [Create a container][2]
-    #   section of the [Docker Remote API][3] and the `--security-opt`
-    #   option to [docker run][4].
+    #   This parameter maps to `SecurityOpt` in the [Create a container][4]
+    #   section of the [Docker Remote API][5] and the `--security-opt`
+    #   option to [docker run][1].
     #
     #   <note markdown="1"> The Amazon ECS container agent running on a container instance must
     #   register with the `ECS_SELINUX_CAPABLE=true` or
     #   `ECS_APPARMOR_CAPABLE=true` environment variables before containers
     #   placed on that instance can use these security options. For more
-    #   information, see [Amazon ECS Container Agent Configuration][5] in
+    #   information, see [Amazon ECS Container Agent Configuration][6] in
     #   the *Amazon Elastic Container Service Developer Guide*.
     #
     #    </note>
     #
     #   For more information about valid values, see [Docker Run Security
-    #   Configuration][4].
+    #   Configuration][1].
     #
     #   Valid values: "no-new-privileges" \| "apparmor:PROFILE" \|
     #   "label:value" \| "credentialspec:CredentialSpecFilePath"
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html
-    #   [2]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
-    #   [3]: https://docs.docker.com/engine/api/v1.35/
-    #   [4]: https://docs.docker.com/engine/reference/run/#security-configuration
-    #   [5]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html
+    #   [1]: https://docs.docker.com/engine/reference/run/#security-configuration
+    #   [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html
+    #   [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/linux-gmsa.html
+    #   [4]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
+    #   [5]: https://docs.docker.com/engine/api/v1.35/
+    #   [6]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html
     #   @return [Array<String>]
     #
     # @!attribute [rw] interactive
@@ -4549,7 +4554,7 @@ module Aws::ECS
     #
     #  * Linux platform version `1.4.0` or later.
     #
-    # ^
+    # * Windows platform version `1.0.0` or later.
     #
     #  </note>
     #
@@ -7141,18 +7146,23 @@ module Aws::ECS
     #   `awsvpcTrunking` is specified, the ENI limit for your Amazon ECS
     #   container instances is affected. If `containerInsights` is
     #   specified, the default setting for Amazon Web Services CloudWatch
-    #   Container Insights for your clusters is affected.
+    #   Container Insights for your clusters is affected. If
+    #   `tagResourceAuthorization` is specified, the opt-in option for
+    #   tagging resources on creation is affected. For information about the
+    #   opt-in timeline, see [Tagging authorization timeline][1] in the
+    #   *Amazon ECS Developer Guide*.
     #
     #   When you specify `fargateFIPSMode` for the `name` and `enabled` for
     #   the `value`, Fargate uses FIPS-140 compliant cryptographic
     #   algorithms on your tasks. For more information about FIPS-140
     #   compliance with Fargate, see [ Amazon Web Services Fargate Federal
-    #   Information Processing Standard (FIPS) 140-2 compliance][1] in the
+    #   Information Processing Standard (FIPS) 140-2 compliance][2] in the
     #   *Amazon Elastic Container Service Developer Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSEC2ContainerServiceDocs/build/server-root/AmazonECS/latest/developerguide/ecs-fips-compliance.html
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
+    #   [2]: https://docs.aws.amazon.com/AWSEC2ContainerServiceDocs/build/server-root/AmazonECS/latest/developerguide/ecs-fips-compliance.html
     #   @return [String]
     #
     # @!attribute [rw] value
@@ -7193,7 +7203,14 @@ module Aws::ECS
     #   `containerInsights` is specified, the default setting for Amazon Web
     #   Services CloudWatch Container Insights for your clusters is
     #   affected. If `fargateFIPSMode` is specified, Fargate FIPS 140
-    #   compliance is affected.
+    #   compliance is affected. If `tagResourceAuthorization` is specified,
+    #   the opt-in option for tagging resources on creation is affected. For
+    #   information about the opt-in timeline, see [Tagging authorization
+    #   timeline][1] in the *Amazon ECS Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
     #   @return [String]
     #
     # @!attribute [rw] value
@@ -7773,7 +7790,7 @@ module Aws::ECS
     #
     #    * Linux platform version `1.4.0` or later.
     #
-    #   ^
+    #   * Windows platform version `1.0.0` or later.
     #
     #    </note>
     #
@@ -9079,8 +9096,8 @@ module Aws::ECS
     #
     # @!attribute [rw] enable_execute_command
     #   Whether or not the execute command functionality is turned on for
-    #   the task. If `true`, this enables execute command functionality on
-    #   all containers in the task.
+    #   the task. If `true`, this turns on the execute command functionality
+    #   on all containers in the task.
     #   @return [Boolean]
     #
     # @!attribute [rw] group

data/lib/aws-sdk-ecs.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-ecs/customizations'
 # @!group service
 module Aws::ECS
 
-  GEM_VERSION = '1.113.0'
+  GEM_VERSION = '1.115.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ecs
 version: !ruby/object:Gem::Version
-  version: 1.113.0
+  version: 1.115.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-10 00:00:00.000000000 Z
+date: 2023-04-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core