aws-sdk-ecs 1.116.0 → 1.131.0

data/lib/aws-sdk-ecs/types.rb

@@ -127,7 +127,7 @@ module Aws::ECS
     #
     # @!attribute [rw] auto_scaling_group_arn
     #   The Amazon Resource Name (ARN) that identifies the Auto Scaling
-    #   group.
+    #   group, or the Auto Scaling group name.
     #   @return [String]
     #
     # @!attribute [rw] managed_scaling
@@ -763,7 +763,7 @@ module Aws::ECS
     #   the "HTTP" namespace type in the Command Line Interface. Other
     #   types of instance discovery aren't used by Service Connect.
     #
-    #   If you update the service with an empty string `""` for the
+    #   If you update the cluster with an empty string `""` for the
     #   namespace name, the cluster configuration for Service Connect is
     #   removed. Note that the namespace will remain in Cloud Map and must
     #   be deleted separately.
@@ -837,11 +837,6 @@ module Aws::ECS
     #
     # @!attribute [rw] image_digest
     #   The container image manifest digest.
-    #
-    #   <note markdown="1"> The `imageDigest` is only returned if the container is using an
-    #   image hosted in Amazon ECR, otherwise it is omitted.
-    #
-    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] runtime_id
@@ -1409,6 +1404,8 @@ module Aws::ECS
     #   [Amazon ECS-optimized Linux AMI][2] in the *Amazon Elastic Container
     #   Service Developer Guide*.
     #
+    #   The valid values are 2-120 seconds.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html
@@ -1449,6 +1446,8 @@ module Aws::ECS
     #   ECS-optimized Linux AMI][2] in the *Amazon Elastic Container Service
     #   Developer Guide*.
     #
+    #   The valid values are 2-120 seconds.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html
@@ -1806,7 +1805,9 @@ module Aws::ECS
     #   A list of namespaced kernel parameters to set in the container. This
     #   parameter maps to `Sysctls` in the [Create a container][1] section
     #   of the [Docker Remote API][2] and the `--sysctl` option to [docker
-    #   run][3].
+    #   run][3]. For example, you can configure
+    #   `net.ipv4.tcp_keepalive_time` setting to maintain longer lived
+    #   connections.
     #
     #   <note markdown="1"> We don't recommended that you specify network-related
     #   `systemControls` parameters for multiple containers in a single task
@@ -1819,6 +1820,16 @@ module Aws::ECS
     #
     #    </note>
     #
+    #   <note markdown="1"> This parameter is not supported for Windows containers.
+    #
+    #    </note>
+    #
+    #   <note markdown="1"> This parameter is only supported for tasks that are hosted on
+    #   Fargate if the tasks are using platform version `1.4.0` or later
+    #   (Linux). This isn't supported for Windows containers on Fargate.
+    #
+    #    </note>
+    #
     #
     #
     #   [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
@@ -1842,6 +1853,52 @@ module Aws::ECS
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html
     #   @return [Types::FirelensConfiguration]
     #
+    # @!attribute [rw] credential_specs
+    #   A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`)
+    #   file that configures the container for Active Directory
+    #   authentication. We recommend that you use this parameter instead of
+    #   the `dockerSecurityOptions`. The maximum number of ARNs is 1.
+    #
+    #   There are two formats for each ARN.
+    #
+    #   credentialspecdomainless:MyARN
+    #
+    #   : You use `credentialspecdomainless:MyARN` to provide a `CredSpec`
+    #     with an additional section for a secret in Secrets Manager. You
+    #     provide the login credentials to the domain in the secret.
+    #
+    #     Each task that runs on any container instance can join different
+    #     domains.
+    #
+    #     You can use this format without joining the container instance to
+    #     a domain.
+    #
+    #   credentialspec:MyARN
+    #
+    #   : You use `credentialspec:MyARN` to provide a `CredSpec` for a
+    #     single domain.
+    #
+    #     You must join the container instance to the domain before you
+    #     start any tasks that use this task definition.
+    #
+    #   In both formats, replace `MyARN` with the ARN in SSM or Amazon S3.
+    #
+    #   If you provide a `credentialspecdomainless:MyARN`, the `credspec`
+    #   must provide a ARN in Secrets Manager for a secret containing the
+    #   username, password, and the domain to connect to. For better
+    #   security, the instance isn't joined to the domain for domainless
+    #   authentication. Other applications on the instance can't use the
+    #   domainless credentials. You can use this parameter to run tasks on
+    #   the same instance, even it the tasks need to join different domains.
+    #   For more information, see [Using gMSAs for Windows Containers][1]
+    #   and [Using gMSAs for Linux Containers][2].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html
+    #   [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/linux-gmsa.html
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/ContainerDefinition AWS API Documentation
     #
     class ContainerDefinition < Struct.new(
@@ -1883,7 +1940,8 @@ module Aws::ECS
       :health_check,
       :system_controls,
       :resource_requirements,
-      :firelens_configuration)
+      :firelens_configuration,
+      :credential_specs)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2061,8 +2119,8 @@ module Aws::ECS
     #   @return [Boolean]
     #
     # @!attribute [rw] running_tasks_count
-    #   The number of tasks on the container instance that are in the
-    #   `RUNNING` status.
+    #   The number of tasks on the container instance that have a desired
+    #   status (`desiredStatus`) of `RUNNING`.
     #   @return [Integer]
     #
     # @!attribute [rw] pending_tasks_count
@@ -2177,6 +2235,15 @@ module Aws::ECS
     # is `\{"containerOverrides": [ ] \}`. If a non-empty container override
     # is specified, the `name` parameter must be included.
     #
+    # You can use Secrets Manager or Amazon Web Services Systems Manager
+    # Parameter Store to store the sensitive data. For more information, see
+    # [Retrieve secrets through environment variables][1] in the Amazon ECS
+    # Developer Guide.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/secrets-envvar.html
+    #
     # @!attribute [rw] name
     #   The name of the container that receives the override. This parameter
     #   is required if any override is specified.
@@ -2601,7 +2668,7 @@ module Aws::ECS
     #
     # @!attribute [rw] desired_count
     #   The number of instantiations of the specified task definition to
-    #   place and keep running on your cluster.
+    #   place and keep running in your service.
     #
     #   This is required if `schedulingStrategy` is `REPLICA` or isn't
     #   specified. If `schedulingStrategy` is `DAEMON` then this isn't
@@ -2833,6 +2900,9 @@ module Aws::ECS
     #   ECS resources][1] in the *Amazon Elastic Container Service Developer
     #   Guide*.
     #
+    #   When you use Amazon ECS managed tags, you need to set the
+    #   `propagateTags` request parameter.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html
@@ -2845,6 +2915,8 @@ module Aws::ECS
     #   tags to a task after task creation, use the [TagResource][1] API
     #   action.
     #
+    #   The default is `NONE`.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html
@@ -2949,7 +3021,8 @@ module Aws::ECS
     #   @return [String]
     #
     # @!attribute [rw] task_definition
-    #   The task definition for the tasks in the task set to use.
+    #   The task definition for the tasks in the task set to use. If a
+    #   revision isn't specified, the latest `ACTIVE` revision is used.
     #   @return [String]
     #
     # @!attribute [rw] network_configuration
@@ -3578,9 +3651,13 @@ module Aws::ECS
     # failure. For more information, see [Rolling update][1] in the *Amazon
     # Elastic Container Service Developer Guide*.
     #
+    # For more information about API failure reasons, see [API failure
+    # reasons][2] in the *Amazon Elastic Container Service Developer Guide*.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html
+    # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/api_failures_messages.html
     #
     # @!attribute [rw] enable
     #   Determines whether to use the deployment circuit breaker logic for
@@ -4500,9 +4577,7 @@ module Aws::ECS
     # container. You can specify up to ten environment files. The file must
     # have a `.env` file extension. Each line in an environment file should
     # contain an environment variable in `VARIABLE=VALUE` format. Lines
-    # beginning with `#` are treated as comments and are ignored. For more
-    # information about the environment variable file syntax, see [Declare
-    # default environment variables in file][1].
+    # beginning with `#` are treated as comments and are ignored.
     #
     # If there are environment variables specified using the `environment`
     # parameter in a container definition, they take precedence over the
@@ -4510,20 +4585,26 @@ module Aws::ECS
     # environment files are specified that contain the same variable,
     # they're processed from the top down. We recommend that you use unique
     # variable names. For more information, see [Specifying environment
-    # variables][2] in the *Amazon Elastic Container Service Developer
+    # variables][1] in the *Amazon Elastic Container Service Developer
     # Guide*.
     #
-    # This parameter is only supported for tasks hosted on Fargate using the
-    # following platform versions:
+    # You must use the following platforms for the Fargate launch type:
     #
     # * Linux platform version `1.4.0` or later.
     #
     # * Windows platform version `1.0.0` or later.
     #
+    # Consider the following when using the Fargate launch type:
+    #
+    # * The file is handled like a native Docker env-file.
+    #
+    # * There is no support for shell escape handling.
+    #
+    # * The container entry point interperts the `VARIABLE` values.
     #
     #
-    # [1]: https://docs.docker.com/compose/env-file/
-    # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html
     #
     # @!attribute [rw] value
     #   The Amazon Resource Name (ARN) of the Amazon S3 object containing
@@ -4950,6 +5031,9 @@ module Aws::ECS
     # task with the DescribeTasks API operation or when viewing the task
     # details in the console.
     #
+    # The health check is designed to make sure that your containers survive
+    # agent restarts, upgrades, or temporary unavailability.
+    #
     # The following describes the possible `healthStatus` values for a
     # container:
     #
@@ -4957,23 +5041,57 @@ module Aws::ECS
     #
     # * `UNHEALTHY`-The container health check has failed.
     #
-    # * `UNKNOWN`-The container health check is being evaluated or there's
-    #   no container health check defined.
+    # * `UNKNOWN`-The container health check is being evaluated, there's no
+    #   container health check defined, or Amazon ECS doesn't have the
+    #   health status of the container.
+    #
+    # The following describes the possible `healthStatus` values based on
+    # the container health checker status of essential containers in the
+    # task with the following priority order (high to low):
+    #
+    # * `UNHEALTHY`-One or more essential containers have failed their
+    #   health check.
     #
-    # The following describes the possible `healthStatus` values for a task.
-    # The container health check status of non-essential containers don't
-    # have an effect on the health status of a task.
+    # * `UNKNOWN`-Any essential container running within the task is in an
+    #   `UNKNOWN` state and no other essential containers have an
+    #   `UNHEALTHY` state.
     #
     # * `HEALTHY`-All essential containers within the task have passed their
     #   health checks.
     #
-    # * `UNHEALTHY`-One or more essential containers have failed their
-    #   health check.
+    # Consider the following task health example with 2 containers.
     #
-    # * `UNKNOWN`-The essential containers within the task are still having
-    #   their health checks evaluated, there are only nonessential
-    #   containers with health checks defined, or there are no container
-    #   health checks defined.
+    # * If Container1 is `UNHEALTHY` and Container2 is `UNKNOWN`, the task
+    #   health is `UNHEALTHY`.
+    #
+    # * If Container1 is `UNHEALTHY` and Container2 is `HEALTHY`, the task
+    #   health is `UNHEALTHY`.
+    #
+    # * If Container1 is `HEALTHY` and Container2 is `UNKNOWN`, the task
+    #   health is `UNKNOWN`.
+    #
+    # * If Container1 is `HEALTHY` and Container2 is `HEALTHY`, the task
+    #   health is `HEALTHY`.
+    #
+    # Consider the following task health example with 3 containers.
+    #
+    # * If Container1 is `UNHEALTHY` and Container2 is `UNKNOWN`, and
+    #   Container3 is `UNKNOWN`, the task health is `UNHEALTHY`.
+    #
+    # * If Container1 is `UNHEALTHY` and Container2 is `UNKNOWN`, and
+    #   Container3 is `HEALTHY`, the task health is `UNHEALTHY`.
+    #
+    # * If Container1 is `UNHEALTHY` and Container2 is `HEALTHY`, and
+    #   Container3 is `HEALTHY`, the task health is `UNHEALTHY`.
+    #
+    # * If Container1 is `HEALTHY` and Container2 is `UNKNOWN`, and
+    #   Container3 is `HEALTHY`, the task health is `UNKNOWN`.
+    #
+    # * If Container1 is `HEALTHY` and Container2 is `UNKNOWN`, and
+    #   Container3 is `UNKNOWN`, the task health is `UNKNOWN`.
+    #
+    # * If Container1 is `HEALTHY` and Container2 is `HEALTHY`, and
+    #   Container3 is `HEALTHY`, the task health is `HEALTHY`.
     #
     # If a task is run manually, and not as part of a service, the task will
     # continue its lifecycle regardless of its health status. For tasks that
@@ -4982,6 +5100,13 @@ module Aws::ECS
     #
     # The following are notes about container health check support:
     #
+    # * When the Amazon ECS agent cannot connect to the Amazon ECS service,
+    #   the service reports the container as `UNHEALTHY`.
+    #
+    # * The health check statuses are the "last heard from" response from
+    #   the Amazon ECS agent. There are no assumptions made about the status
+    #   of the container health checks.
+    #
     # * Container health checks require version 1.17.0 or greater of the
     #   Amazon ECS container agent. For more information, see [Updating the
     #   Amazon ECS container agent][2].
@@ -6228,8 +6353,7 @@ module Aws::ECS
     #   target group or groups associated with a service or task set.
     #
     #   A target group ARN is only specified when using an Application Load
-    #   Balancer or Network Load Balancer. If you're using a Classic Load
-    #   Balancer, omit the target group ARN.
+    #   Balancer or Network Load Balancer.
     #
     #   For services using the `ECS` deployment controller, you can specify
     #   one or multiple target groups. For more information, see
@@ -6258,9 +6382,8 @@ module Aws::ECS
     #   The name of the load balancer to associate with the Amazon ECS
     #   service or task set.
     #
-    #   A load balancer name is only specified when using a Classic Load
-    #   Balancer. If you are using an Application Load Balancer or a Network
-    #   Load Balancer the load balancer name parameter should be omitted.
+    #   If you are using an Application Load Balancer or a Network Load
+    #   Balancer the load balancer name parameter should be omitted.
     #   @return [String]
     #
     # @!attribute [rw] container_name
@@ -6302,9 +6425,15 @@ module Aws::ECS
     # containers.
     #
     # * Amazon ECS currently supports a subset of the logging drivers
-    #   available to the Docker daemon (shown in the valid values below).
-    #   Additional log drivers may be available in future releases of the
-    #   Amazon ECS container agent.
+    #   available to the Docker daemon. Additional log drivers may be
+    #   available in future releases of the Amazon ECS container agent.
+    #
+    #   For tasks on Fargate, the supported log drivers are `awslogs`,
+    #   `splunk`, and `awsfirelens`.
+    #
+    #   For tasks hosted on Amazon EC2 instances, the supported log drivers
+    #   are `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
+    #   `logentries`,`syslog`, `splunk`, and `awsfirelens`.
     #
     # * This parameter requires version 1.18 of the Docker Remote API or
     #   greater on your container instance.
@@ -6505,8 +6634,8 @@ module Aws::ECS
     # @!attribute [rw] maximum_scaling_step_size
     #   The maximum number of Amazon EC2 instances that Amazon ECS will
     #   scale out at one time. The scale in process is not affected by this
-    #   parameter. If this parameter is omitted, the default value of `1` is
-    #   used.
+    #   parameter. If this parameter is omitted, the default value of
+    #   `10000` is used.
     #   @return [Integer]
     #
     # @!attribute [rw] instance_warmup_period
@@ -6620,8 +6749,8 @@ module Aws::ECS
     #     `hostPortRange` is set as follows:
     #
     #     * For containers in a task with the `awsvpc` network mode, the
-    #       `hostPort` is set to the same value as the `containerPort`. This
-    #       is a static mapping strategy.
+    #       `hostPortRange` is set to the same value as the
+    #       `containerPortRange`. This is a static mapping strategy.
     #
     #     * For containers in a task with the `bridge` network mode, the
     #       Amazon ECS agent finds open host ports from the default
@@ -6920,10 +7049,10 @@ module Aws::ECS
     #   is listed on the instance under
     #   `/proc/sys/net/ipv4/ip_local_port_range`. If this kernel parameter
     #   is unavailable, the default ephemeral port range from 49153 through
-    #   65535 is used. Do not attempt to specify a host port in the
-    #   ephemeral port range as these are reserved for automatic assignment.
-    #   In general, ports below 32768 are outside of the ephemeral port
-    #   range.
+    #   65535 (Linux) or 49152 through 65535 (Windows) is used. Do not
+    #   attempt to specify a host port in the ephemeral port range as these
+    #   are reserved for automatic assignment. In general, ports below 32768
+    #   are outside of the ephemeral port range.
     #
     #   The default reserved ports are 22 for SSH, the Docker ports 2375 and
     #   2376, and the Amazon ECS container agent ports 51678-51680. Any host
@@ -7013,8 +7142,8 @@ module Aws::ECS
     #     `hostPortRange` is set as follows:
     #
     #     * For containers in a task with the `awsvpc` network mode, the
-    #       `hostPort` is set to the same value as the `containerPort`. This
-    #       is a static mapping strategy.
+    #       `hostPortRange` is set to the same value as the
+    #       `containerPortRange`. This is a static mapping strategy.
     #
     #     * For containers in a task with the `bridge` network mode, the
     #       Amazon ECS agent finds open host ports from the default
@@ -7156,20 +7285,22 @@ module Aws::ECS
     end
 
     # @!attribute [rw] name
-    #   The resource name for which to modify the account setting. If
-    #   `serviceLongArnFormat` is specified, the ARN for your Amazon ECS
-    #   services is affected. If `taskLongArnFormat` is specified, the ARN
-    #   and resource ID for your Amazon ECS tasks is affected. If
-    #   `containerInstanceLongArnFormat` is specified, the ARN and resource
-    #   ID for your Amazon ECS container instances is affected. If
-    #   `awsvpcTrunking` is specified, the ENI limit for your Amazon ECS
-    #   container instances is affected. If `containerInsights` is
-    #   specified, the default setting for Amazon Web Services CloudWatch
-    #   Container Insights for your clusters is affected. If
-    #   `tagResourceAuthorization` is specified, the opt-in option for
-    #   tagging resources on creation is affected. For information about the
-    #   opt-in timeline, see [Tagging authorization timeline][1] in the
-    #   *Amazon ECS Developer Guide*.
+    #   The resource name for which to modify the account setting. If you
+    #   specify `serviceLongArnFormat`, the ARN for your Amazon ECS services
+    #   is affected. If you specify `taskLongArnFormat`, the ARN and
+    #   resource ID for your Amazon ECS tasks is affected. If you specify
+    #   `containerInstanceLongArnFormat`, the ARN and resource ID for your
+    #   Amazon ECS container instances is affected. If you specify
+    #   `awsvpcTrunking`, the ENI limit for your Amazon ECS container
+    #   instances is affected. If you specify `containerInsights`, the
+    #   default setting for Amazon Web Services CloudWatch Container
+    #   Insights for your clusters is affected. If you specify
+    #   `tagResourceAuthorization`, the opt-in option for tagging resources
+    #   on creation is affected. For information about the opt-in timeline,
+    #   see [Tagging authorization timeline][1] in the *Amazon ECS Developer
+    #   Guide*. If you specify `fargateTaskRetirementWaitPeriod`, the
+    #   default wait time to retire a Fargate task due to required
+    #   maintenance is affected.
     #
     #   When you specify `fargateFIPSMode` for the `name` and `enabled` for
     #   the `value`, Fargate uses FIPS-140 compliant cryptographic
@@ -7178,15 +7309,36 @@ module Aws::ECS
     #   Information Processing Standard (FIPS) 140-2 compliance][2] in the
     #   *Amazon Elastic Container Service Developer Guide*.
     #
+    #   When Amazon Web Services determines that a security or
+    #   infrastructure update is needed for an Amazon ECS task hosted on
+    #   Fargate, the tasks need to be stopped and new tasks launched to
+    #   replace them. Use `fargateTaskRetirementWaitPeriod` to set the wait
+    #   time to retire a Fargate task to the default. For information about
+    #   the Fargate tasks maintenance, see [Amazon Web Services Fargate task
+    #   maintenance][3] in the *Amazon ECS Developer Guide*.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
     #   [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-fips-compliance.html
+    #   [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-maintenance.html
     #   @return [String]
     #
     # @!attribute [rw] value
     #   The account setting value for the specified principal ARN. Accepted
-    #   values are `enabled` and `disabled`.
+    #   values are `enabled`, `disabled`, `on`, and `off`.
+    #
+    #   When you specify `fargateTaskRetirementWaitPeriod` for the `name`,
+    #   the following are the valid values:
+    #
+    #   * `0` - Amazon Web Services sends the notification, and immediately
+    #     retires the affected tasks.
+    #
+    #   * `7` - Amazon Web Services sends the notification, and waits 7
+    #     calendar days to retire the tasks.
+    #
+    #   * `14` - Amazon Web Services sends the notification, and waits 14
+    #     calendar days to retire the tasks.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/PutAccountSettingDefaultRequest AWS API Documentation
@@ -7212,20 +7364,22 @@ module Aws::ECS
 
     # @!attribute [rw] name
     #   The Amazon ECS resource name for which to modify the account
-    #   setting. If `serviceLongArnFormat` is specified, the ARN for your
-    #   Amazon ECS services is affected. If `taskLongArnFormat` is
-    #   specified, the ARN and resource ID for your Amazon ECS tasks is
-    #   affected. If `containerInstanceLongArnFormat` is specified, the ARN
-    #   and resource ID for your Amazon ECS container instances is affected.
-    #   If `awsvpcTrunking` is specified, the elastic network interface
-    #   (ENI) limit for your Amazon ECS container instances is affected. If
-    #   `containerInsights` is specified, the default setting for Amazon Web
-    #   Services CloudWatch Container Insights for your clusters is
-    #   affected. If `fargateFIPSMode` is specified, Fargate FIPS 140
-    #   compliance is affected. If `tagResourceAuthorization` is specified,
-    #   the opt-in option for tagging resources on creation is affected. For
-    #   information about the opt-in timeline, see [Tagging authorization
-    #   timeline][1] in the *Amazon ECS Developer Guide*.
+    #   setting. If you specify `serviceLongArnFormat`, the ARN for your
+    #   Amazon ECS services is affected. If you specify `taskLongArnFormat`,
+    #   the ARN and resource ID for your Amazon ECS tasks is affected. If
+    #   you specify `containerInstanceLongArnFormat`, the ARN and resource
+    #   ID for your Amazon ECS container instances is affected. If you
+    #   specify `awsvpcTrunking`, the elastic network interface (ENI) limit
+    #   for your Amazon ECS container instances is affected. If you specify
+    #   `containerInsights`, the default setting for Amazon Web Services
+    #   CloudWatch Container Insights for your clusters is affected. If you
+    #   specify `fargateFIPSMode`, Fargate FIPS 140 compliance is affected.
+    #   If you specify `tagResourceAuthorization`, the opt-in option for
+    #   tagging resources on creation is affected. For information about the
+    #   opt-in timeline, see [Tagging authorization timeline][1] in the
+    #   *Amazon ECS Developer Guide*. If you specify
+    #   `fargateTaskRetirementWaitPeriod`, the wait time to retire a Fargate
+    #   task is affected.
     #
     #
     #
@@ -7234,7 +7388,19 @@ module Aws::ECS
     #
     # @!attribute [rw] value
     #   The account setting value for the specified principal ARN. Accepted
-    #   values are `enabled` and `disabled`.
+    #   values are `enabled`, `disabled`, `on`, and `off`.
+    #
+    #   When you specify `fargateTaskRetirementWaitPeriod` for the `name`,
+    #   the following are the valid values:
+    #
+    #   * `0` - Amazon Web Services sends the notification, and immediately
+    #     retires the affected tasks.
+    #
+    #   * `7` - Amazon Web Services sends the notification, and waits 7
+    #     calendar days to retire the tasks.
+    #
+    #   * `14` - Amazon Web Services sends the notification, and waits 14
+    #     calendar days to retire the tasks.
     #   @return [String]
     #
     # @!attribute [rw] principal_arn
@@ -7244,7 +7410,10 @@ module Aws::ECS
     #   or role explicitly overrides these settings. If this field is
     #   omitted, the setting is changed only for the authenticated user.
     #
-    #   <note markdown="1"> Federated users assume the account setting of the root user and
+    #   <note markdown="1"> You must use the root user when you set the Fargate wait time
+    #   (`fargateTaskRetirementWaitPeriod`).
+    #
+    #    Federated users assume the account setting of the root user and
     #   can't have explicit account settings set for them.
     #
     #    </note>
@@ -7710,20 +7879,33 @@ module Aws::ECS
     #
     # @!attribute [rw] pid_mode
     #   The process namespace to use for the containers in the task. The
-    #   valid values are `host` or `task`. If `host` is specified, then all
-    #   containers within the tasks that specified the `host` PID mode on
-    #   the same container instance share the same process namespace with
-    #   the host Amazon EC2 instance. If `task` is specified, all containers
-    #   within the specified task share the same process namespace. If no
-    #   value is specified, the default is a private namespace. For more
-    #   information, see [PID settings][1] in the *Docker run reference*.
-    #
-    #   If the `host` PID mode is used, be aware that there is a heightened
-    #   risk of undesired process namespace expose. For more information,
-    #   see [Docker security][2].
+    #   valid values are `host` or `task`. On Fargate for Linux containers,
+    #   the only valid value is `task`. For example, monitoring sidecars
+    #   might need `pidMode` to access information about other containers
+    #   running in the same task.
     #
-    #   <note markdown="1"> This parameter is not supported for Windows containers or tasks run
-    #   on Fargate.
+    #   If `host` is specified, all containers within the tasks that
+    #   specified the `host` PID mode on the same container instance share
+    #   the same process namespace with the host Amazon EC2 instance.
+    #
+    #   If `task` is specified, all containers within the specified task
+    #   share the same process namespace.
+    #
+    #   If no value is specified, the default is a private namespace for
+    #   each container. For more information, see [PID settings][1] in the
+    #   *Docker run reference*.
+    #
+    #   If the `host` PID mode is used, there's a heightened risk of
+    #   undesired process namespace exposure. For more information, see
+    #   [Docker security][2].
+    #
+    #   <note markdown="1"> This parameter is not supported for Windows containers.
+    #
+    #    </note>
+    #
+    #   <note markdown="1"> This parameter is only supported for tasks that are hosted on
+    #   Fargate if the tasks are using platform version `1.4.0` or later
+    #   (Linux). This isn't supported for Windows containers on Fargate.
     #
     #    </note>
     #
@@ -8789,9 +8971,15 @@ module Aws::ECS
     #   your containers.
     #
     #   * Amazon ECS currently supports a subset of the logging drivers
-    #     available to the Docker daemon (shown in the valid values below).
-    #     Additional log drivers may be available in future releases of the
-    #     Amazon ECS container agent.
+    #     available to the Docker daemon. Additional log drivers may be
+    #     available in future releases of the Amazon ECS container agent.
+    #
+    #     For tasks on Fargate, the supported log drivers are `awslogs`,
+    #     `splunk`, and `awsfirelens`.
+    #
+    #     For tasks hosted on Amazon EC2 instances, the supported log
+    #     drivers are `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
+    #     `logentries`,`syslog`, `splunk`, and `awsfirelens`.
     #
     #   * This parameter requires version 1.18 of the Docker Remote API or
     #     greater on your container instance.
@@ -9478,8 +9666,16 @@ module Aws::ECS
     #   @return [String]
     #
     # @!attribute [rw] value
-    #   The value for the namespaced kernel parameter that's specified in
-    #   `namespace`.
+    #   The namespaced kernel parameter to set a `value` for.
+    #
+    #   Valid IPC namespace values: `"kernel.msgmax" | "kernel.msgmnb" |
+    #   "kernel.msgmni" | "kernel.sem" | "kernel.shmall" | "kernel.shmmax" |
+    #   "kernel.shmmni" | "kernel.shm_rmid_forced"`, and `Sysctls` that
+    #   start with `"fs.mqueue.*"`
+    #
+    #   Valid network namespace values: `Sysctls` that start with `"net.*"`
+    #
+    #   All of these values are supported by Fargate.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/SystemControl AWS API Documentation
@@ -9865,6 +10061,9 @@ module Aws::ECS
     #   The stop code indicating why a task was stopped. The `stoppedReason`
     #   might contain additional details.
     #
+    #   For more information about stop code, see [Stopped tasks error
+    #   codes][1] in the *Amazon ECS User Guide*.
+    #
     #   The following are valid values:
     #
     #   * `TaskFailedToStart`
@@ -9878,6 +10077,10 @@ module Aws::ECS
     #   * `ServiceSchedulerInitiated`
     #
     #   * `SpotInterruption`
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/userguide/stopped-task-error-codes.html
     #   @return [String]
     #
     # @!attribute [rw] stopped_at
@@ -9893,7 +10096,7 @@ module Aws::ECS
     # @!attribute [rw] stopping_at
     #   The Unix timestamp for the time when the task stops. More
     #   specifically, it's for the time when the task transitions from the
-    #   `RUNNING` state to `STOPPED`.
+    #   `RUNNING` state to `STOPPING`.
     #   @return [Time]
     #
     # @!attribute [rw] tags
@@ -10178,9 +10381,10 @@ module Aws::ECS
     #   @return [Types::RuntimePlatform]
     #
     # @!attribute [rw] requires_compatibilities
-    #   The task launch types the task definition was validated against. For
-    #   more information, see [Amazon ECS launch types][1] in the *Amazon
-    #   Elastic Container Service Developer Guide*.
+    #   The task launch types the task definition was validated against. The
+    #   valid values are `EC2`, `FARGATE`, and `EXTERNAL`. For more
+    #   information, see [Amazon ECS launch types][1] in the *Amazon Elastic
+    #   Container Service Developer Guide*.
     #
     #
     #
@@ -10274,20 +10478,33 @@ module Aws::ECS
     #
     # @!attribute [rw] pid_mode
     #   The process namespace to use for the containers in the task. The
-    #   valid values are `host` or `task`. If `host` is specified, then all
-    #   containers within the tasks that specified the `host` PID mode on
-    #   the same container instance share the same process namespace with
-    #   the host Amazon EC2 instance. If `task` is specified, all containers
-    #   within the specified task share the same process namespace. If no
-    #   value is specified, the default is a private namespace. For more
-    #   information, see [PID settings][1] in the *Docker run reference*.
-    #
-    #   If the `host` PID mode is used, be aware that there is a heightened
-    #   risk of undesired process namespace expose. For more information,
-    #   see [Docker security][2].
+    #   valid values are `host` or `task`. On Fargate for Linux containers,
+    #   the only valid value is `task`. For example, monitoring sidecars
+    #   might need `pidMode` to access information about other containers
+    #   running in the same task.
     #
-    #   <note markdown="1"> This parameter is not supported for Windows containers or tasks run
-    #   on Fargate.
+    #   If `host` is specified, all containers within the tasks that
+    #   specified the `host` PID mode on the same container instance share
+    #   the same process namespace with the host Amazon EC2 instance.
+    #
+    #   If `task` is specified, all containers within the specified task
+    #   share the same process namespace.
+    #
+    #   If no value is specified, the default is a private namespace for
+    #   each container. For more information, see [PID settings][1] in the
+    #   *Docker run reference*.
+    #
+    #   If the `host` PID mode is used, there's a heightened risk of
+    #   undesired process namespace exposure. For more information, see
+    #   [Docker security][2].
+    #
+    #   <note markdown="1"> This parameter is not supported for Windows containers.
+    #
+    #    </note>
+    #
+    #   <note markdown="1"> This parameter is only supported for tasks that are hosted on
+    #   Fargate if the tasks are using platform version `1.4.0` or later
+    #   (Linux). This isn't supported for Windows containers on Fargate.
     #
     #    </note>
     #
@@ -11530,6 +11747,8 @@ module Aws::ECS
     #   numbers, underscores, and hyphens are allowed. This name is
     #   referenced in the `sourceVolume` parameter of container definition
     #   `mountPoints`.
+    #
+    #   This is required wwhen you use an Amazon EFS volume.
     #   @return [String]
     #
     # @!attribute [rw] host