aws-sdk-ecs 1.126.0 → 1.128.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 51b258bd6d7e20038a798090223de8f77ab8e5fe1d6cd10f474c570f0dbf0535
4
- data.tar.gz: 735e186b6140b57f10be602091e845a925af78e5f5ee913c4af7f752f4d8f2b9
3
+ metadata.gz: 9302d1f06b4be5977e3b3831e539026885625d3faa878ecb0f52c232db705d34
4
+ data.tar.gz: 3b51621802cd54762d8d93d66194dbbcf9e4fe470e9db1803d44a4aebc676b9a
5
5
  SHA512:
6
- metadata.gz: db7ebb7443c6a2557d3261f0a6326bb2a98cc7b46c659db03a33a40c21246bd008e962607c244078b4f6e59fb8a201eb524aef40985918e87becff30650e817a
7
- data.tar.gz: dea09257f059d88f7199457973dde97ee5da08eb1c2e1c8c39acb0560e9e905ddfee742f0eea5c8046e1d37b52a8ebb256088d2b389d2c456d0298222aadb7a3
6
+ metadata.gz: 544c0b1885aeb3f71e5f03a38a3bf5cacb733a4fea30e54b10e7777620286bae78f28359c7e07d2edf03a700725ada83822c942044d1db9681c173a1d328652e
7
+ data.tar.gz: 45b59876e6a5868fbb6f72075087e4c6272d6072e9fde52321cbfc5e143b2aab7eba78f5d983fc746f32a0c1bddf53f41f395b7c52fea6d07dd4558e95ec6de6
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.128.0 (2023-08-31)
5
+ ------------------
6
+
7
+ * Feature - This release adds support for an account-level setting that you can use to configure the number of days for AWS Fargate task retirement.
8
+
9
+ 1.127.0 (2023-08-04)
10
+ ------------------
11
+
12
+ * Feature - This is a documentation update to address various tickets.
13
+
4
14
  1.126.0 (2023-07-11)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.126.0
1
+ 1.128.0
@@ -1635,7 +1635,8 @@ module Aws::ECS
1635
1635
  # value.
1636
1636
  #
1637
1637
  # @option params [required, String] :task_definition
1638
- # The task definition for the tasks in the task set to use.
1638
+ # The task definition for the tasks in the task set to use. If a
1639
+ # revision isn't specified, the latest `ACTIVE` revision is used.
1639
1640
  #
1640
1641
  # @option params [Types::NetworkConfiguration] :network_configuration
1641
1642
  # An object representing the network configuration for a task set.
@@ -1912,13 +1913,13 @@ module Aws::ECS
1912
1913
  # @example Request syntax with placeholder values
1913
1914
  #
1914
1915
  # resp = client.delete_account_setting({
1915
- # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
1916
+ # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization, fargateTaskRetirementWaitPeriod
1916
1917
  # principal_arn: "String",
1917
1918
  # })
1918
1919
  #
1919
1920
  # @example Response structure
1920
1921
  #
1921
- # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
1922
+ # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization", "fargateTaskRetirementWaitPeriod"
1922
1923
  # resp.setting.value #=> String
1923
1924
  # resp.setting.principal_arn #=> String
1924
1925
  #
@@ -4061,6 +4062,11 @@ module Aws::ECS
4061
4062
  # Currently, stopped tasks appear in the returned results for at least
4062
4063
  # one hour.
4063
4064
  #
4065
+ # If you have tasks with tags, and then delete the cluster, the tagged
4066
+ # tasks are returned in the response. If you create a new cluster with
4067
+ # the same name as the deleted cluster, the tagged tasks are not
4068
+ # included in the response.
4069
+ #
4064
4070
  # @option params [String] :cluster
4065
4071
  # The short name or full Amazon Resource Name (ARN) of the cluster that
4066
4072
  # hosts the task or tasks to describe. If you do not specify a cluster,
@@ -4573,7 +4579,7 @@ module Aws::ECS
4573
4579
  # @example Request syntax with placeholder values
4574
4580
  #
4575
4581
  # resp = client.list_account_settings({
4576
- # name: "serviceLongArnFormat", # accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
4582
+ # name: "serviceLongArnFormat", # accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization, fargateTaskRetirementWaitPeriod
4577
4583
  # value: "String",
4578
4584
  # principal_arn: "String",
4579
4585
  # effective_settings: false,
@@ -4584,7 +4590,7 @@ module Aws::ECS
4584
4590
  # @example Response structure
4585
4591
  #
4586
4592
  # resp.settings #=> Array
4587
- # resp.settings[0].name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
4593
+ # resp.settings[0].name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization", "fargateTaskRetirementWaitPeriod"
4588
4594
  # resp.settings[0].value #=> String
4589
4595
  # resp.settings[0].principal_arn #=> String
4590
4596
  # resp.next_token #=> String
@@ -5303,8 +5309,6 @@ module Aws::ECS
5303
5309
  # started the task, or by the desired status of the task.
5304
5310
  #
5305
5311
  # Recently stopped tasks might appear in the returned results.
5306
- # Currently, stopped tasks appear in the returned results for at least
5307
- # one hour.
5308
5312
  #
5309
5313
  # @option params [String] :cluster
5310
5314
  # The short name or full Amazon Resource Name (ARN) of the cluster to
@@ -5453,25 +5457,24 @@ module Aws::ECS
5453
5457
  # account settings. For more information, see [Account Settings][1] in
5454
5458
  # the *Amazon Elastic Container Service Developer Guide*.
5455
5459
  #
5456
- # When `serviceLongArnFormat`, `taskLongArnFormat`, or
5457
- # `containerInstanceLongArnFormat` are specified, the Amazon Resource
5458
- # Name (ARN) and resource ID format of the resource type for a specified
5459
- # user, role, or the root user for an account is affected. The opt-in
5460
- # and opt-out account setting must be set for each Amazon ECS resource
5461
- # separately. The ARN and resource ID format of a resource is defined by
5462
- # the opt-in status of the user or role that created the resource. You
5463
- # must turn on this setting to use Amazon ECS features such as resource
5464
- # tagging.
5465
- #
5466
- # When `awsvpcTrunking` is specified, the elastic network interface
5467
- # (ENI) limit for any new container instances that support the feature
5468
- # is changed. If `awsvpcTrunking` is turned on, any new container
5469
- # instances that support the feature are launched have the increased ENI
5470
- # limits available to them. For more information, see [Elastic Network
5460
+ # When you specify `serviceLongArnFormat`, `taskLongArnFormat`, or
5461
+ # `containerInstanceLongArnFormat`, the Amazon Resource Name (ARN) and
5462
+ # resource ID format of the resource type for a specified user, role, or
5463
+ # the root user for an account is affected. The opt-in and opt-out
5464
+ # account setting must be set for each Amazon ECS resource separately.
5465
+ # The ARN and resource ID format of a resource is defined by the opt-in
5466
+ # status of the user or role that created the resource. You must turn on
5467
+ # this setting to use Amazon ECS features such as resource tagging.
5468
+ #
5469
+ # When you specify `awsvpcTrunking`, the elastic network interface (ENI)
5470
+ # limit for any new container instances that support the feature is
5471
+ # changed. If `awsvpcTrunking` is turned on, any new container instances
5472
+ # that support the feature are launched have the increased ENI limits
5473
+ # available to them. For more information, see [Elastic Network
5471
5474
  # Interface Trunking][2] in the *Amazon Elastic Container Service
5472
5475
  # Developer Guide*.
5473
5476
  #
5474
- # When `containerInsights` is specified, the default setting indicating
5477
+ # When you specify `containerInsights`, the default setting indicating
5475
5478
  # whether Amazon Web Services CloudWatch Container Insights is turned on
5476
5479
  # for your clusters is changed. If `containerInsights` is turned on, any
5477
5480
  # new clusters that are created will have Container Insights turned on
@@ -5488,29 +5491,39 @@ module Aws::ECS
5488
5491
  # action. For more information, see [Grant permission to tag resources
5489
5492
  # on creation][4] in the *Amazon ECS Developer Guide*.
5490
5493
  #
5494
+ # When Amazon Web Services determines that a security or infrastructure
5495
+ # update is needed for an Amazon ECS task hosted on Fargate, the tasks
5496
+ # need to be stopped and new tasks launched to replace them. Use
5497
+ # `fargateTaskRetirementWaitPeriod` to configure the wait time to retire
5498
+ # a Fargate task. For information about the Fargate tasks maintenance,
5499
+ # see [Amazon Web Services Fargate task maintenance][5] in the *Amazon
5500
+ # ECS Developer Guide*.
5501
+ #
5491
5502
  #
5492
5503
  #
5493
5504
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html
5494
5505
  # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-eni.html
5495
5506
  # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html
5496
5507
  # [4]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/supported-iam-actions-tagging.html
5508
+ # [5]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-maintenance.html
5497
5509
  #
5498
5510
  # @option params [required, String] :name
5499
5511
  # The Amazon ECS resource name for which to modify the account setting.
5500
- # If `serviceLongArnFormat` is specified, the ARN for your Amazon ECS
5501
- # services is affected. If `taskLongArnFormat` is specified, the ARN and
5502
- # resource ID for your Amazon ECS tasks is affected. If
5503
- # `containerInstanceLongArnFormat` is specified, the ARN and resource ID
5504
- # for your Amazon ECS container instances is affected. If
5505
- # `awsvpcTrunking` is specified, the elastic network interface (ENI)
5506
- # limit for your Amazon ECS container instances is affected. If
5507
- # `containerInsights` is specified, the default setting for Amazon Web
5508
- # Services CloudWatch Container Insights for your clusters is affected.
5509
- # If `fargateFIPSMode` is specified, Fargate FIPS 140 compliance is
5510
- # affected. If `tagResourceAuthorization` is specified, the opt-in
5511
- # option for tagging resources on creation is affected. For information
5512
- # about the opt-in timeline, see [Tagging authorization timeline][1] in
5513
- # the *Amazon ECS Developer Guide*.
5512
+ # If you specify `serviceLongArnFormat`, the ARN for your Amazon ECS
5513
+ # services is affected. If you specify `taskLongArnFormat`, the ARN and
5514
+ # resource ID for your Amazon ECS tasks is affected. If you specify
5515
+ # `containerInstanceLongArnFormat`, the ARN and resource ID for your
5516
+ # Amazon ECS container instances is affected. If you specify
5517
+ # `awsvpcTrunking`, the elastic network interface (ENI) limit for your
5518
+ # Amazon ECS container instances is affected. If you specify
5519
+ # `containerInsights`, the default setting for Amazon Web Services
5520
+ # CloudWatch Container Insights for your clusters is affected. If you
5521
+ # specify `fargateFIPSMode`, Fargate FIPS 140 compliance is affected. If
5522
+ # you specify `tagResourceAuthorization`, the opt-in option for tagging
5523
+ # resources on creation is affected. For information about the opt-in
5524
+ # timeline, see [Tagging authorization timeline][1] in the *Amazon ECS
5525
+ # Developer Guide*. If you specify `fargateTaskRetirementWaitPeriod`,
5526
+ # the wait time to retire a Fargate task is affected.
5514
5527
  #
5515
5528
  #
5516
5529
  #
@@ -5520,6 +5533,18 @@ module Aws::ECS
5520
5533
  # The account setting value for the specified principal ARN. Accepted
5521
5534
  # values are `enabled`, `disabled`, `on`, and `off`.
5522
5535
  #
5536
+ # When you specify `fargateTaskRetirementWaitPeriod` for the `name`, the
5537
+ # following are the valid values:
5538
+ #
5539
+ # * `0` - immediately retire the tasks and patch Fargate
5540
+ #
5541
+ # There is no advanced notification. Your tasks are retired
5542
+ # immediately, and Fargate is patched without any notification.
5543
+ #
5544
+ # * `7` -wait 7 calendar days to retire the tasks and patch Fargate
5545
+ #
5546
+ # * `14` - wait 14 calendar days to retire the tasks and patch Fargate
5547
+ #
5523
5548
  # @option params [String] :principal_arn
5524
5549
  # The ARN of the principal, which can be a user, role, or the root user.
5525
5550
  # If you specify the root user, it modifies the account setting for all
@@ -5527,7 +5552,10 @@ module Aws::ECS
5527
5552
  # explicitly overrides these settings. If this field is omitted, the
5528
5553
  # setting is changed only for the authenticated user.
5529
5554
  #
5530
- # <note markdown="1"> Federated users assume the account setting of the root user and can't
5555
+ # <note markdown="1"> You must use the root user when you set the Fargate wait time
5556
+ # (`fargateTaskRetirementWaitPeriod`).
5557
+ #
5558
+ # Federated users assume the account setting of the root user and can't
5531
5559
  # have explicit account settings set for them.
5532
5560
  #
5533
5561
  # </note>
@@ -5581,14 +5609,14 @@ module Aws::ECS
5581
5609
  # @example Request syntax with placeholder values
5582
5610
  #
5583
5611
  # resp = client.put_account_setting({
5584
- # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
5612
+ # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization, fargateTaskRetirementWaitPeriod
5585
5613
  # value: "String", # required
5586
5614
  # principal_arn: "String",
5587
5615
  # })
5588
5616
  #
5589
5617
  # @example Response structure
5590
5618
  #
5591
- # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
5619
+ # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization", "fargateTaskRetirementWaitPeriod"
5592
5620
  # resp.setting.value #=> String
5593
5621
  # resp.setting.principal_arn #=> String
5594
5622
  #
@@ -5606,19 +5634,21 @@ module Aws::ECS
5606
5634
  # set on a per-Region basis.
5607
5635
  #
5608
5636
  # @option params [required, String] :name
5609
- # The resource name for which to modify the account setting. If
5610
- # `serviceLongArnFormat` is specified, the ARN for your Amazon ECS
5611
- # services is affected. If `taskLongArnFormat` is specified, the ARN and
5612
- # resource ID for your Amazon ECS tasks is affected. If
5613
- # `containerInstanceLongArnFormat` is specified, the ARN and resource ID
5614
- # for your Amazon ECS container instances is affected. If
5615
- # `awsvpcTrunking` is specified, the ENI limit for your Amazon ECS
5616
- # container instances is affected. If `containerInsights` is specified,
5617
- # the default setting for Amazon Web Services CloudWatch Container
5618
- # Insights for your clusters is affected. If `tagResourceAuthorization`
5619
- # is specified, the opt-in option for tagging resources on creation is
5620
- # affected. For information about the opt-in timeline, see [Tagging
5621
- # authorization timeline][1] in the *Amazon ECS Developer Guide*.
5637
+ # The resource name for which to modify the account setting. If you
5638
+ # specify `serviceLongArnFormat`, the ARN for your Amazon ECS services
5639
+ # is affected. If you specify `taskLongArnFormat`, the ARN and resource
5640
+ # ID for your Amazon ECS tasks is affected. If you specify
5641
+ # `containerInstanceLongArnFormat`, the ARN and resource ID for your
5642
+ # Amazon ECS container instances is affected. If you specify
5643
+ # `awsvpcTrunking`, the ENI limit for your Amazon ECS container
5644
+ # instances is affected. If you specify `containerInsights`, the default
5645
+ # setting for Amazon Web Services CloudWatch Container Insights for your
5646
+ # clusters is affected. If you specify `tagResourceAuthorization`, the
5647
+ # opt-in option for tagging resources on creation is affected. For
5648
+ # information about the opt-in timeline, see [Tagging authorization
5649
+ # timeline][1] in the *Amazon ECS Developer Guide*. If you specify
5650
+ # `fargateTaskRetirementWaitPeriod`, the default wait time to retire a
5651
+ # Fargate task due to required maintenance is affected.
5622
5652
  #
5623
5653
  # When you specify `fargateFIPSMode` for the `name` and `enabled` for
5624
5654
  # the `value`, Fargate uses FIPS-140 compliant cryptographic algorithms
@@ -5627,15 +5657,36 @@ module Aws::ECS
5627
5657
  # Processing Standard (FIPS) 140-2 compliance][2] in the *Amazon Elastic
5628
5658
  # Container Service Developer Guide*.
5629
5659
  #
5660
+ # When Amazon Web Services determines that a security or infrastructure
5661
+ # update is needed for an Amazon ECS task hosted on Fargate, the tasks
5662
+ # need to be stopped and new tasks launched to replace them. Use
5663
+ # `fargateTaskRetirementWaitPeriod` to set the wait time to retire a
5664
+ # Fargate task to the default. For information about the Fargate tasks
5665
+ # maintenance, see [Amazon Web Services Fargate task maintenance][3] in
5666
+ # the *Amazon ECS Developer Guide*.
5667
+ #
5630
5668
  #
5631
5669
  #
5632
5670
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
5633
5671
  # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-fips-compliance.html
5672
+ # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-maintenance.html
5634
5673
  #
5635
5674
  # @option params [required, String] :value
5636
5675
  # The account setting value for the specified principal ARN. Accepted
5637
5676
  # values are `enabled`, `disabled`, `on`, and `off`.
5638
5677
  #
5678
+ # When you specify `fargateTaskRetirementWaitPeriod` for the `name`, the
5679
+ # following are the valid values:
5680
+ #
5681
+ # * `0` - immediately retire the tasks and patch Fargate
5682
+ #
5683
+ # There is no advanced notification. Your tasks are retired
5684
+ # immediately, and Fargate is patched without any notification.
5685
+ #
5686
+ # * `7` -wait 7 calendar days to retire the tasks and patch Fargate
5687
+ #
5688
+ # * `14` - wait 14 calendar days to retire the tasks and patch Fargate
5689
+ #
5639
5690
  # @return [Types::PutAccountSettingDefaultResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
5640
5691
  #
5641
5692
  # * {Types::PutAccountSettingDefaultResponse#setting #setting} => Types::Setting
@@ -5664,13 +5715,13 @@ module Aws::ECS
5664
5715
  # @example Request syntax with placeholder values
5665
5716
  #
5666
5717
  # resp = client.put_account_setting_default({
5667
- # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization
5718
+ # name: "serviceLongArnFormat", # required, accepts serviceLongArnFormat, taskLongArnFormat, containerInstanceLongArnFormat, awsvpcTrunking, containerInsights, fargateFIPSMode, tagResourceAuthorization, fargateTaskRetirementWaitPeriod
5668
5719
  # value: "String", # required
5669
5720
  # })
5670
5721
  #
5671
5722
  # @example Response structure
5672
5723
  #
5673
- # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization"
5724
+ # resp.setting.name #=> String, one of "serviceLongArnFormat", "taskLongArnFormat", "containerInstanceLongArnFormat", "awsvpcTrunking", "containerInsights", "fargateFIPSMode", "tagResourceAuthorization", "fargateTaskRetirementWaitPeriod"
5674
5725
  # resp.setting.value #=> String
5675
5726
  # resp.setting.principal_arn #=> String
5676
5727
  #
@@ -6302,20 +6353,33 @@ module Aws::ECS
6302
6353
  #
6303
6354
  # @option params [String] :pid_mode
6304
6355
  # The process namespace to use for the containers in the task. The valid
6305
- # values are `host` or `task`. If `host` is specified, then all
6306
- # containers within the tasks that specified the `host` PID mode on the
6307
- # same container instance share the same process namespace with the host
6308
- # Amazon EC2 instance. If `task` is specified, all containers within the
6309
- # specified task share the same process namespace. If no value is
6310
- # specified, the default is a private namespace. For more information,
6311
- # see [PID settings][1] in the *Docker run reference*.
6312
- #
6313
- # If the `host` PID mode is used, be aware that there is a heightened
6314
- # risk of undesired process namespace expose. For more information, see
6356
+ # values are `host` or `task`. On Fargate for Linux containers, the only
6357
+ # valid value is `task`. For example, monitoring sidecars might need
6358
+ # `pidMode` to access information about other containers running in the
6359
+ # same task.
6360
+ #
6361
+ # If `host` is specified, all containers within the tasks that specified
6362
+ # the `host` PID mode on the same container instance share the same
6363
+ # process namespace with the host Amazon EC2 instance.
6364
+ #
6365
+ # If `task` is specified, all containers within the specified task share
6366
+ # the same process namespace.
6367
+ #
6368
+ # If no value is specified, the default is a private namespace for each
6369
+ # container. For more information, see [PID settings][1] in the *Docker
6370
+ # run reference*.
6371
+ #
6372
+ # If the `host` PID mode is used, there's a heightened risk of
6373
+ # undesired process namespace exposure. For more information, see
6315
6374
  # [Docker security][2].
6316
6375
  #
6317
- # <note markdown="1"> This parameter is not supported for Windows containers or tasks run on
6318
- # Fargate.
6376
+ # <note markdown="1"> This parameter is not supported for Windows containers.
6377
+ #
6378
+ # </note>
6379
+ #
6380
+ # <note markdown="1"> This parameter is only supported for tasks that are hosted on Fargate
6381
+ # if the tasks are using platform version `1.4.0` or later (Linux). This
6382
+ # isn't supported for Windows containers on Fargate.
6319
6383
  #
6320
6384
  # </note>
6321
6385
  #
@@ -8865,23 +8929,21 @@ module Aws::ECS
8865
8929
  # with the largest number of running tasks for this service.
8866
8930
  #
8867
8931
  # <note markdown="1"> You must have a service-linked role when you update any of the
8868
- # following service properties. If you specified a custom role when you
8869
- # created the service, Amazon ECS automatically replaces the
8870
- # [roleARN][2] associated with the service with the ARN of your
8871
- # service-linked role. For more information, see [Service-linked
8872
- # roles][3] in the *Amazon Elastic Container Service Developer Guide*.
8932
+ # following service properties:
8873
8933
  #
8874
- # * `loadBalancers,`
8934
+ # * `loadBalancers`,
8875
8935
  #
8876
8936
  # * `serviceRegistries`
8877
8937
  #
8938
+ # For more information about the role see the `CreateService` request
8939
+ # parameter [ `role` ][2].
8940
+ #
8878
8941
  # </note>
8879
8942
  #
8880
8943
  #
8881
8944
  #
8882
8945
  # [1]: https://docs.aws.amazon.com/codedeploy/latest/APIReference/API_CreateDeployment.html
8883
- # [2]: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_Service.html#ECS-Type-Service-roleArn
8884
- # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using-service-linked-roles.html
8946
+ # [2]: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html#ECS-CreateService-request-role
8885
8947
  #
8886
8948
  # @option params [String] :cluster
8887
8949
  # The short name or full Amazon Resource Name (ARN) of the cluster that
@@ -9746,7 +9808,7 @@ module Aws::ECS
9746
9808
  params: params,
9747
9809
  config: config)
9748
9810
  context[:gem_name] = 'aws-sdk-ecs'
9749
- context[:gem_version] = '1.126.0'
9811
+ context[:gem_version] = '1.128.0'
9750
9812
  Seahorse::Client::Request.new(handlers, context)
9751
9813
  end
9752
9814
 
@@ -127,7 +127,7 @@ module Aws::ECS
127
127
  #
128
128
  # @!attribute [rw] auto_scaling_group_arn
129
129
  # The Amazon Resource Name (ARN) that identifies the Auto Scaling
130
- # group.
130
+ # group, or the Auto Scaling group name.
131
131
  # @return [String]
132
132
  #
133
133
  # @!attribute [rw] managed_scaling
@@ -1404,6 +1404,8 @@ module Aws::ECS
1404
1404
  # [Amazon ECS-optimized Linux AMI][2] in the *Amazon Elastic Container
1405
1405
  # Service Developer Guide*.
1406
1406
  #
1407
+ # The valid values are 2-120 seconds.
1408
+ #
1407
1409
  #
1408
1410
  #
1409
1411
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html
@@ -1444,6 +1446,8 @@ module Aws::ECS
1444
1446
  # ECS-optimized Linux AMI][2] in the *Amazon Elastic Container Service
1445
1447
  # Developer Guide*.
1446
1448
  #
1449
+ # The valid values are 2-120 seconds.
1450
+ #
1447
1451
  #
1448
1452
  #
1449
1453
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html
@@ -1801,7 +1805,9 @@ module Aws::ECS
1801
1805
  # A list of namespaced kernel parameters to set in the container. This
1802
1806
  # parameter maps to `Sysctls` in the [Create a container][1] section
1803
1807
  # of the [Docker Remote API][2] and the `--sysctl` option to [docker
1804
- # run][3].
1808
+ # run][3]. For example, you can configure
1809
+ # `net.ipv4.tcp_keepalive_time` setting to maintain longer lived
1810
+ # connections.
1805
1811
  #
1806
1812
  # <note markdown="1"> We don't recommended that you specify network-related
1807
1813
  # `systemControls` parameters for multiple containers in a single task
@@ -1814,6 +1820,16 @@ module Aws::ECS
1814
1820
  #
1815
1821
  # </note>
1816
1822
  #
1823
+ # <note markdown="1"> This parameter is not supported for Windows containers.
1824
+ #
1825
+ # </note>
1826
+ #
1827
+ # <note markdown="1"> This parameter is only supported for tasks that are hosted on
1828
+ # Fargate if the tasks are using platform version `1.4.0` or later
1829
+ # (Linux). This isn't supported for Windows containers on Fargate.
1830
+ #
1831
+ # </note>
1832
+ #
1817
1833
  #
1818
1834
  #
1819
1835
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
@@ -1838,22 +1854,44 @@ module Aws::ECS
1838
1854
  # @return [Types::FirelensConfiguration]
1839
1855
  #
1840
1856
  # @!attribute [rw] credential_specs
1841
- # A list of ARNs in SSM or Amazon S3 to a credential spec
1842
- # (`credspec`code&gt;) file that configures a container for Active
1843
- # Directory authentication. This parameter is only used with
1844
- # domainless authentication.
1857
+ # A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`)
1858
+ # file that configures the container for Active Directory
1859
+ # authentication. We recommend that you use this parameter instead of
1860
+ # the `dockerSecurityOptions`. The maximum number of ARNs is 1.
1861
+ #
1862
+ # There are two formats for each ARN.
1863
+ #
1864
+ # credentialspecdomainless:MyARN
1845
1865
  #
1846
- # The format for each ARN is `credentialspecdomainless:MyARN`. Replace
1847
- # `MyARN` with the ARN in SSM or Amazon S3.
1866
+ # : You use `credentialspecdomainless:MyARN` to provide a `CredSpec`
1867
+ # with an additional section for a secret in Secrets Manager. You
1868
+ # provide the login credentials to the domain in the secret.
1848
1869
  #
1849
- # The `credspec` must provide a ARN in Secrets Manager for a secret
1850
- # containing the username, password, and the domain to connect to. For
1851
- # better security, the instance isn't joined to the domain for
1852
- # domainless authentication. Other applications on the instance can't
1853
- # use the domainless credentials. You can use this parameter to run
1854
- # tasks on the same instance, even it the tasks need to join different
1855
- # domains. For more information, see [Using gMSAs for Windows
1856
- # Containers][1] and [Using gMSAs for Linux Containers][2].
1870
+ # Each task that runs on any container instance can join different
1871
+ # domains.
1872
+ #
1873
+ # You can use this format without joining the container instance to
1874
+ # a domain.
1875
+ #
1876
+ # credentialspec:MyARN
1877
+ #
1878
+ # : You use `credentialspec:MyARN` to provide a `CredSpec` for a
1879
+ # single domain.
1880
+ #
1881
+ # You must join the container instance to the domain before you
1882
+ # start any tasks that use this task definition.
1883
+ #
1884
+ # In both formats, replace `MyARN` with the ARN in SSM or Amazon S3.
1885
+ #
1886
+ # If you provide a `credentialspecdomainless:MyARN`, the `credspec`
1887
+ # must provide a ARN in Secrets Manager for a secret containing the
1888
+ # username, password, and the domain to connect to. For better
1889
+ # security, the instance isn't joined to the domain for domainless
1890
+ # authentication. Other applications on the instance can't use the
1891
+ # domainless credentials. You can use this parameter to run tasks on
1892
+ # the same instance, even it the tasks need to join different domains.
1893
+ # For more information, see [Using gMSAs for Windows Containers][1]
1894
+ # and [Using gMSAs for Linux Containers][2].
1857
1895
  #
1858
1896
  #
1859
1897
  #
@@ -2081,8 +2119,8 @@ module Aws::ECS
2081
2119
  # @return [Boolean]
2082
2120
  #
2083
2121
  # @!attribute [rw] running_tasks_count
2084
- # The number of tasks on the container instance that are in the
2085
- # `RUNNING` status.
2122
+ # The number of tasks on the container instance that have a desired
2123
+ # status (`desiredStatus`) of `RUNNING`.
2086
2124
  # @return [Integer]
2087
2125
  #
2088
2126
  # @!attribute [rw] pending_tasks_count
@@ -2197,6 +2235,15 @@ module Aws::ECS
2197
2235
  # is `\{"containerOverrides": [ ] \}`. If a non-empty container override
2198
2236
  # is specified, the `name` parameter must be included.
2199
2237
  #
2238
+ # You can use Secrets Manager or Amazon Web Services Systems Manager
2239
+ # Parameter Store to store the sensitive data. For more information, see
2240
+ # [Retrieve secrets through environment variables][1] in the Amazon ECS
2241
+ # Developer Guide.
2242
+ #
2243
+ #
2244
+ #
2245
+ # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/secrets-envvar.html
2246
+ #
2200
2247
  # @!attribute [rw] name
2201
2248
  # The name of the container that receives the override. This parameter
2202
2249
  # is required if any override is specified.
@@ -2974,7 +3021,8 @@ module Aws::ECS
2974
3021
  # @return [String]
2975
3022
  #
2976
3023
  # @!attribute [rw] task_definition
2977
- # The task definition for the tasks in the task set to use.
3024
+ # The task definition for the tasks in the task set to use. If a
3025
+ # revision isn't specified, the latest `ACTIVE` revision is used.
2978
3026
  # @return [String]
2979
3027
  #
2980
3028
  # @!attribute [rw] network_configuration
@@ -3603,9 +3651,13 @@ module Aws::ECS
3603
3651
  # failure. For more information, see [Rolling update][1] in the *Amazon
3604
3652
  # Elastic Container Service Developer Guide*.
3605
3653
  #
3654
+ # For more information about API failure reasons, see [API failure
3655
+ # reasons][2] in the *Amazon Elastic Container Service Developer Guide*.
3656
+ #
3606
3657
  #
3607
3658
  #
3608
3659
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html
3660
+ # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/api_failures_messages.html
3609
3661
  #
3610
3662
  # @!attribute [rw] enable
3611
3663
  # Determines whether to use the deployment circuit breaker logic for
@@ -4538,8 +4590,7 @@ module Aws::ECS
4538
4590
  # variables][2] in the *Amazon Elastic Container Service Developer
4539
4591
  # Guide*.
4540
4592
  #
4541
- # This parameter is only supported for tasks hosted on Fargate using the
4542
- # following platform versions:
4593
+ # You must use the following platforms for the Fargate launch type:
4543
4594
  #
4544
4595
  # * Linux platform version `1.4.0` or later.
4545
4596
  #
@@ -6263,8 +6314,7 @@ module Aws::ECS
6263
6314
  # target group or groups associated with a service or task set.
6264
6315
  #
6265
6316
  # A target group ARN is only specified when using an Application Load
6266
- # Balancer or Network Load Balancer. If you're using a Classic Load
6267
- # Balancer, omit the target group ARN.
6317
+ # Balancer or Network Load Balancer.
6268
6318
  #
6269
6319
  # For services using the `ECS` deployment controller, you can specify
6270
6320
  # one or multiple target groups. For more information, see
@@ -6293,9 +6343,8 @@ module Aws::ECS
6293
6343
  # The name of the load balancer to associate with the Amazon ECS
6294
6344
  # service or task set.
6295
6345
  #
6296
- # A load balancer name is only specified when using a Classic Load
6297
- # Balancer. If you are using an Application Load Balancer or a Network
6298
- # Load Balancer the load balancer name parameter should be omitted.
6346
+ # If you are using an Application Load Balancer or a Network Load
6347
+ # Balancer the load balancer name parameter should be omitted.
6299
6348
  # @return [String]
6300
6349
  #
6301
6350
  # @!attribute [rw] container_name
@@ -6337,9 +6386,15 @@ module Aws::ECS
6337
6386
  # containers.
6338
6387
  #
6339
6388
  # * Amazon ECS currently supports a subset of the logging drivers
6340
- # available to the Docker daemon (shown in the valid values below).
6341
- # Additional log drivers may be available in future releases of the
6342
- # Amazon ECS container agent.
6389
+ # available to the Docker daemon. Additional log drivers may be
6390
+ # available in future releases of the Amazon ECS container agent.
6391
+ #
6392
+ # For tasks on Fargate, the supported log drivers are `awslogs`,
6393
+ # `splunk`, and `awsfirelens`.
6394
+ #
6395
+ # For tasks hosted on Amazon EC2 instances, the supported log drivers
6396
+ # are `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
6397
+ # `logentries`,`syslog`, `splunk`, and `awsfirelens`.
6343
6398
  #
6344
6399
  # * This parameter requires version 1.18 of the Docker Remote API or
6345
6400
  # greater on your container instance.
@@ -6540,8 +6595,8 @@ module Aws::ECS
6540
6595
  # @!attribute [rw] maximum_scaling_step_size
6541
6596
  # The maximum number of Amazon EC2 instances that Amazon ECS will
6542
6597
  # scale out at one time. The scale in process is not affected by this
6543
- # parameter. If this parameter is omitted, the default value of `1` is
6544
- # used.
6598
+ # parameter. If this parameter is omitted, the default value of
6599
+ # `10000` is used.
6545
6600
  # @return [Integer]
6546
6601
  #
6547
6602
  # @!attribute [rw] instance_warmup_period
@@ -6955,10 +7010,10 @@ module Aws::ECS
6955
7010
  # is listed on the instance under
6956
7011
  # `/proc/sys/net/ipv4/ip_local_port_range`. If this kernel parameter
6957
7012
  # is unavailable, the default ephemeral port range from 49153 through
6958
- # 65535 is used. Do not attempt to specify a host port in the
6959
- # ephemeral port range as these are reserved for automatic assignment.
6960
- # In general, ports below 32768 are outside of the ephemeral port
6961
- # range.
7013
+ # 65535 (Linux) or 49152 through 65535 (Windows) is used. Do not
7014
+ # attempt to specify a host port in the ephemeral port range as these
7015
+ # are reserved for automatic assignment. In general, ports below 32768
7016
+ # are outside of the ephemeral port range.
6962
7017
  #
6963
7018
  # The default reserved ports are 22 for SSH, the Docker ports 2375 and
6964
7019
  # 2376, and the Amazon ECS container agent ports 51678-51680. Any host
@@ -7191,20 +7246,22 @@ module Aws::ECS
7191
7246
  end
7192
7247
 
7193
7248
  # @!attribute [rw] name
7194
- # The resource name for which to modify the account setting. If
7195
- # `serviceLongArnFormat` is specified, the ARN for your Amazon ECS
7196
- # services is affected. If `taskLongArnFormat` is specified, the ARN
7197
- # and resource ID for your Amazon ECS tasks is affected. If
7198
- # `containerInstanceLongArnFormat` is specified, the ARN and resource
7199
- # ID for your Amazon ECS container instances is affected. If
7200
- # `awsvpcTrunking` is specified, the ENI limit for your Amazon ECS
7201
- # container instances is affected. If `containerInsights` is
7202
- # specified, the default setting for Amazon Web Services CloudWatch
7203
- # Container Insights for your clusters is affected. If
7204
- # `tagResourceAuthorization` is specified, the opt-in option for
7205
- # tagging resources on creation is affected. For information about the
7206
- # opt-in timeline, see [Tagging authorization timeline][1] in the
7207
- # *Amazon ECS Developer Guide*.
7249
+ # The resource name for which to modify the account setting. If you
7250
+ # specify `serviceLongArnFormat`, the ARN for your Amazon ECS services
7251
+ # is affected. If you specify `taskLongArnFormat`, the ARN and
7252
+ # resource ID for your Amazon ECS tasks is affected. If you specify
7253
+ # `containerInstanceLongArnFormat`, the ARN and resource ID for your
7254
+ # Amazon ECS container instances is affected. If you specify
7255
+ # `awsvpcTrunking`, the ENI limit for your Amazon ECS container
7256
+ # instances is affected. If you specify `containerInsights`, the
7257
+ # default setting for Amazon Web Services CloudWatch Container
7258
+ # Insights for your clusters is affected. If you specify
7259
+ # `tagResourceAuthorization`, the opt-in option for tagging resources
7260
+ # on creation is affected. For information about the opt-in timeline,
7261
+ # see [Tagging authorization timeline][1] in the *Amazon ECS Developer
7262
+ # Guide*. If you specify `fargateTaskRetirementWaitPeriod`, the
7263
+ # default wait time to retire a Fargate task due to required
7264
+ # maintenance is affected.
7208
7265
  #
7209
7266
  # When you specify `fargateFIPSMode` for the `name` and `enabled` for
7210
7267
  # the `value`, Fargate uses FIPS-140 compliant cryptographic
@@ -7213,15 +7270,36 @@ module Aws::ECS
7213
7270
  # Information Processing Standard (FIPS) 140-2 compliance][2] in the
7214
7271
  # *Amazon Elastic Container Service Developer Guide*.
7215
7272
  #
7273
+ # When Amazon Web Services determines that a security or
7274
+ # infrastructure update is needed for an Amazon ECS task hosted on
7275
+ # Fargate, the tasks need to be stopped and new tasks launched to
7276
+ # replace them. Use `fargateTaskRetirementWaitPeriod` to set the wait
7277
+ # time to retire a Fargate task to the default. For information about
7278
+ # the Fargate tasks maintenance, see [Amazon Web Services Fargate task
7279
+ # maintenance][3] in the *Amazon ECS Developer Guide*.
7280
+ #
7216
7281
  #
7217
7282
  #
7218
7283
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources
7219
7284
  # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-fips-compliance.html
7285
+ # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-maintenance.html
7220
7286
  # @return [String]
7221
7287
  #
7222
7288
  # @!attribute [rw] value
7223
7289
  # The account setting value for the specified principal ARN. Accepted
7224
7290
  # values are `enabled`, `disabled`, `on`, and `off`.
7291
+ #
7292
+ # When you specify `fargateTaskRetirementWaitPeriod` for the `name`,
7293
+ # the following are the valid values:
7294
+ #
7295
+ # * `0` - immediately retire the tasks and patch Fargate
7296
+ #
7297
+ # There is no advanced notification. Your tasks are retired
7298
+ # immediately, and Fargate is patched without any notification.
7299
+ #
7300
+ # * `7` -wait 7 calendar days to retire the tasks and patch Fargate
7301
+ #
7302
+ # * `14` - wait 14 calendar days to retire the tasks and patch Fargate
7225
7303
  # @return [String]
7226
7304
  #
7227
7305
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/PutAccountSettingDefaultRequest AWS API Documentation
@@ -7247,20 +7325,22 @@ module Aws::ECS
7247
7325
 
7248
7326
  # @!attribute [rw] name
7249
7327
  # The Amazon ECS resource name for which to modify the account
7250
- # setting. If `serviceLongArnFormat` is specified, the ARN for your
7251
- # Amazon ECS services is affected. If `taskLongArnFormat` is
7252
- # specified, the ARN and resource ID for your Amazon ECS tasks is
7253
- # affected. If `containerInstanceLongArnFormat` is specified, the ARN
7254
- # and resource ID for your Amazon ECS container instances is affected.
7255
- # If `awsvpcTrunking` is specified, the elastic network interface
7256
- # (ENI) limit for your Amazon ECS container instances is affected. If
7257
- # `containerInsights` is specified, the default setting for Amazon Web
7258
- # Services CloudWatch Container Insights for your clusters is
7259
- # affected. If `fargateFIPSMode` is specified, Fargate FIPS 140
7260
- # compliance is affected. If `tagResourceAuthorization` is specified,
7261
- # the opt-in option for tagging resources on creation is affected. For
7262
- # information about the opt-in timeline, see [Tagging authorization
7263
- # timeline][1] in the *Amazon ECS Developer Guide*.
7328
+ # setting. If you specify `serviceLongArnFormat`, the ARN for your
7329
+ # Amazon ECS services is affected. If you specify `taskLongArnFormat`,
7330
+ # the ARN and resource ID for your Amazon ECS tasks is affected. If
7331
+ # you specify `containerInstanceLongArnFormat`, the ARN and resource
7332
+ # ID for your Amazon ECS container instances is affected. If you
7333
+ # specify `awsvpcTrunking`, the elastic network interface (ENI) limit
7334
+ # for your Amazon ECS container instances is affected. If you specify
7335
+ # `containerInsights`, the default setting for Amazon Web Services
7336
+ # CloudWatch Container Insights for your clusters is affected. If you
7337
+ # specify `fargateFIPSMode`, Fargate FIPS 140 compliance is affected.
7338
+ # If you specify `tagResourceAuthorization`, the opt-in option for
7339
+ # tagging resources on creation is affected. For information about the
7340
+ # opt-in timeline, see [Tagging authorization timeline][1] in the
7341
+ # *Amazon ECS Developer Guide*. If you specify
7342
+ # `fargateTaskRetirementWaitPeriod`, the wait time to retire a Fargate
7343
+ # task is affected.
7264
7344
  #
7265
7345
  #
7266
7346
  #
@@ -7270,6 +7350,18 @@ module Aws::ECS
7270
7350
  # @!attribute [rw] value
7271
7351
  # The account setting value for the specified principal ARN. Accepted
7272
7352
  # values are `enabled`, `disabled`, `on`, and `off`.
7353
+ #
7354
+ # When you specify `fargateTaskRetirementWaitPeriod` for the `name`,
7355
+ # the following are the valid values:
7356
+ #
7357
+ # * `0` - immediately retire the tasks and patch Fargate
7358
+ #
7359
+ # There is no advanced notification. Your tasks are retired
7360
+ # immediately, and Fargate is patched without any notification.
7361
+ #
7362
+ # * `7` -wait 7 calendar days to retire the tasks and patch Fargate
7363
+ #
7364
+ # * `14` - wait 14 calendar days to retire the tasks and patch Fargate
7273
7365
  # @return [String]
7274
7366
  #
7275
7367
  # @!attribute [rw] principal_arn
@@ -7279,7 +7371,10 @@ module Aws::ECS
7279
7371
  # or role explicitly overrides these settings. If this field is
7280
7372
  # omitted, the setting is changed only for the authenticated user.
7281
7373
  #
7282
- # <note markdown="1"> Federated users assume the account setting of the root user and
7374
+ # <note markdown="1"> You must use the root user when you set the Fargate wait time
7375
+ # (`fargateTaskRetirementWaitPeriod`).
7376
+ #
7377
+ # Federated users assume the account setting of the root user and
7283
7378
  # can't have explicit account settings set for them.
7284
7379
  #
7285
7380
  # </note>
@@ -7745,20 +7840,33 @@ module Aws::ECS
7745
7840
  #
7746
7841
  # @!attribute [rw] pid_mode
7747
7842
  # The process namespace to use for the containers in the task. The
7748
- # valid values are `host` or `task`. If `host` is specified, then all
7749
- # containers within the tasks that specified the `host` PID mode on
7750
- # the same container instance share the same process namespace with
7751
- # the host Amazon EC2 instance. If `task` is specified, all containers
7752
- # within the specified task share the same process namespace. If no
7753
- # value is specified, the default is a private namespace. For more
7754
- # information, see [PID settings][1] in the *Docker run reference*.
7755
- #
7756
- # If the `host` PID mode is used, be aware that there is a heightened
7757
- # risk of undesired process namespace expose. For more information,
7758
- # see [Docker security][2].
7843
+ # valid values are `host` or `task`. On Fargate for Linux containers,
7844
+ # the only valid value is `task`. For example, monitoring sidecars
7845
+ # might need `pidMode` to access information about other containers
7846
+ # running in the same task.
7759
7847
  #
7760
- # <note markdown="1"> This parameter is not supported for Windows containers or tasks run
7761
- # on Fargate.
7848
+ # If `host` is specified, all containers within the tasks that
7849
+ # specified the `host` PID mode on the same container instance share
7850
+ # the same process namespace with the host Amazon EC2 instance.
7851
+ #
7852
+ # If `task` is specified, all containers within the specified task
7853
+ # share the same process namespace.
7854
+ #
7855
+ # If no value is specified, the default is a private namespace for
7856
+ # each container. For more information, see [PID settings][1] in the
7857
+ # *Docker run reference*.
7858
+ #
7859
+ # If the `host` PID mode is used, there's a heightened risk of
7860
+ # undesired process namespace exposure. For more information, see
7861
+ # [Docker security][2].
7862
+ #
7863
+ # <note markdown="1"> This parameter is not supported for Windows containers.
7864
+ #
7865
+ # </note>
7866
+ #
7867
+ # <note markdown="1"> This parameter is only supported for tasks that are hosted on
7868
+ # Fargate if the tasks are using platform version `1.4.0` or later
7869
+ # (Linux). This isn't supported for Windows containers on Fargate.
7762
7870
  #
7763
7871
  # </note>
7764
7872
  #
@@ -8824,9 +8932,15 @@ module Aws::ECS
8824
8932
  # your containers.
8825
8933
  #
8826
8934
  # * Amazon ECS currently supports a subset of the logging drivers
8827
- # available to the Docker daemon (shown in the valid values below).
8828
- # Additional log drivers may be available in future releases of the
8829
- # Amazon ECS container agent.
8935
+ # available to the Docker daemon. Additional log drivers may be
8936
+ # available in future releases of the Amazon ECS container agent.
8937
+ #
8938
+ # For tasks on Fargate, the supported log drivers are `awslogs`,
8939
+ # `splunk`, and `awsfirelens`.
8940
+ #
8941
+ # For tasks hosted on Amazon EC2 instances, the supported log
8942
+ # drivers are `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
8943
+ # `logentries`,`syslog`, `splunk`, and `awsfirelens`.
8830
8944
  #
8831
8945
  # * This parameter requires version 1.18 of the Docker Remote API or
8832
8946
  # greater on your container instance.
@@ -9513,8 +9627,16 @@ module Aws::ECS
9513
9627
  # @return [String]
9514
9628
  #
9515
9629
  # @!attribute [rw] value
9516
- # The value for the namespaced kernel parameter that's specified in
9517
- # `namespace`.
9630
+ # The namespaced kernel parameter to set a `value` for.
9631
+ #
9632
+ # Valid IPC namespace values: `"kernel.msgmax" | "kernel.msgmnb" |
9633
+ # "kernel.msgmni" | "kernel.sem" | "kernel.shmall" | "kernel.shmmax" |
9634
+ # "kernel.shmmni" | "kernel.shm_rmid_forced"`, and `Sysctls` that
9635
+ # start with `"fs.mqueue.*"`
9636
+ #
9637
+ # Valid network namespace values: `Sysctls` that start with `"net.*"`
9638
+ #
9639
+ # All of these values are supported by Fargate.
9518
9640
  # @return [String]
9519
9641
  #
9520
9642
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/SystemControl AWS API Documentation
@@ -9900,6 +10022,9 @@ module Aws::ECS
9900
10022
  # The stop code indicating why a task was stopped. The `stoppedReason`
9901
10023
  # might contain additional details.
9902
10024
  #
10025
+ # For more information about stop code, see [Stopped tasks error
10026
+ # codes][1] in the *Amazon ECS User Guide*.
10027
+ #
9903
10028
  # The following are valid values:
9904
10029
  #
9905
10030
  # * `TaskFailedToStart`
@@ -9913,6 +10038,10 @@ module Aws::ECS
9913
10038
  # * `ServiceSchedulerInitiated`
9914
10039
  #
9915
10040
  # * `SpotInterruption`
10041
+ #
10042
+ #
10043
+ #
10044
+ # [1]: https://docs.aws.amazon.com/AmazonECS/latest/userguide/stopped-task-error-codes.html
9916
10045
  # @return [String]
9917
10046
  #
9918
10047
  # @!attribute [rw] stopped_at
@@ -9928,7 +10057,7 @@ module Aws::ECS
9928
10057
  # @!attribute [rw] stopping_at
9929
10058
  # The Unix timestamp for the time when the task stops. More
9930
10059
  # specifically, it's for the time when the task transitions from the
9931
- # `RUNNING` state to `STOPPED`.
10060
+ # `RUNNING` state to `STOPPING`.
9932
10061
  # @return [Time]
9933
10062
  #
9934
10063
  # @!attribute [rw] tags
@@ -10213,9 +10342,10 @@ module Aws::ECS
10213
10342
  # @return [Types::RuntimePlatform]
10214
10343
  #
10215
10344
  # @!attribute [rw] requires_compatibilities
10216
- # The task launch types the task definition was validated against. For
10217
- # more information, see [Amazon ECS launch types][1] in the *Amazon
10218
- # Elastic Container Service Developer Guide*.
10345
+ # The task launch types the task definition was validated against. The
10346
+ # valid values are `EC2`, `FARGATE`, and `EXTERNAL`. For more
10347
+ # information, see [Amazon ECS launch types][1] in the *Amazon Elastic
10348
+ # Container Service Developer Guide*.
10219
10349
  #
10220
10350
  #
10221
10351
  #
@@ -10309,20 +10439,33 @@ module Aws::ECS
10309
10439
  #
10310
10440
  # @!attribute [rw] pid_mode
10311
10441
  # The process namespace to use for the containers in the task. The
10312
- # valid values are `host` or `task`. If `host` is specified, then all
10313
- # containers within the tasks that specified the `host` PID mode on
10314
- # the same container instance share the same process namespace with
10315
- # the host Amazon EC2 instance. If `task` is specified, all containers
10316
- # within the specified task share the same process namespace. If no
10317
- # value is specified, the default is a private namespace. For more
10318
- # information, see [PID settings][1] in the *Docker run reference*.
10319
- #
10320
- # If the `host` PID mode is used, be aware that there is a heightened
10321
- # risk of undesired process namespace expose. For more information,
10322
- # see [Docker security][2].
10442
+ # valid values are `host` or `task`. On Fargate for Linux containers,
10443
+ # the only valid value is `task`. For example, monitoring sidecars
10444
+ # might need `pidMode` to access information about other containers
10445
+ # running in the same task.
10323
10446
  #
10324
- # <note markdown="1"> This parameter is not supported for Windows containers or tasks run
10325
- # on Fargate.
10447
+ # If `host` is specified, all containers within the tasks that
10448
+ # specified the `host` PID mode on the same container instance share
10449
+ # the same process namespace with the host Amazon EC2 instance.
10450
+ #
10451
+ # If `task` is specified, all containers within the specified task
10452
+ # share the same process namespace.
10453
+ #
10454
+ # If no value is specified, the default is a private namespace for
10455
+ # each container. For more information, see [PID settings][1] in the
10456
+ # *Docker run reference*.
10457
+ #
10458
+ # If the `host` PID mode is used, there's a heightened risk of
10459
+ # undesired process namespace exposure. For more information, see
10460
+ # [Docker security][2].
10461
+ #
10462
+ # <note markdown="1"> This parameter is not supported for Windows containers.
10463
+ #
10464
+ # </note>
10465
+ #
10466
+ # <note markdown="1"> This parameter is only supported for tasks that are hosted on
10467
+ # Fargate if the tasks are using platform version `1.4.0` or later
10468
+ # (Linux). This isn't supported for Windows containers on Fargate.
10326
10469
  #
10327
10470
  # </note>
10328
10471
  #
@@ -11565,6 +11708,8 @@ module Aws::ECS
11565
11708
  # numbers, underscores, and hyphens are allowed. This name is
11566
11709
  # referenced in the `sourceVolume` parameter of container definition
11567
11710
  # `mountPoints`.
11711
+ #
11712
+ # This is required wwhen you use an Amazon EFS volume.
11568
11713
  # @return [String]
11569
11714
  #
11570
11715
  # @!attribute [rw] host
data/lib/aws-sdk-ecs.rb CHANGED
@@ -53,6 +53,6 @@ require_relative 'aws-sdk-ecs/customizations'
53
53
  # @!group service
54
54
  module Aws::ECS
55
55
 
56
- GEM_VERSION = '1.126.0'
56
+ GEM_VERSION = '1.128.0'
57
57
 
58
58
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-ecs
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.126.0
4
+ version: 1.128.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-07-11 00:00:00.000000000 Z
11
+ date: 2023-08-31 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core