aws-sdk-ecs 1.70.0 → 1.71.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 634b8a725f6d67650e7fb24e3c942def79613856fdd0878119474936c2defa5a
4
- data.tar.gz: e43980aa9554c140ff528e556404265f9ff60f87498211c605c1c0a78bf79f0f
3
+ metadata.gz: ef38ae17e19da6bf7565c0920bc6e8a77b3ecd926e4ab2781003198c426e7777
4
+ data.tar.gz: 633aef4c48871e2db0c2b51b21072078b65d17c5f17cede9acd4a119a33eab00
5
5
  SHA512:
6
- metadata.gz: 8ecd9953ea75d482a6026842b32a9fa30bfca59b002f0eb62009961841b2324d3207752d1cc5e02e91b8a56685fbec636f4efa76030b6e50f23c1dc79e7c8363
7
- data.tar.gz: '01111359fa633d470279dd6202a1ad888b6ee4322274cad535764760519bcc57c41e2bcbbe3333d9fb3ec6c76489f6e138aed491003a61d900a01ff313149066'
6
+ metadata.gz: d2a2ff9d3bdb791bd947f5d84e73d59312c9c205451c3f84ec93c931ae1b85c293797a4352e89fa36c8ef88730ebbf8fd5abb74b935e51a90d0eb9ffbd50dcc3
7
+ data.tar.gz: 90e60a53d978cd6e92d901f6f5c64902e19198b6f903686c9e52b1cdd76b691741b7c648d563f43e356af346f4c5a03822dfb88122a0c0ccceb169ad87479816
@@ -49,6 +49,6 @@ require_relative 'aws-sdk-ecs/customizations'
49
49
  # @!group service
50
50
  module Aws::ECS
51
51
 
52
- GEM_VERSION = '1.70.0'
52
+ GEM_VERSION = '1.71.0'
53
53
 
54
54
  end
@@ -775,8 +775,8 @@ module Aws::ECS
775
775
  # task definition to run in your service. If a `revision` is not
776
776
  # specified, the latest `ACTIVE` revision is used.
777
777
  #
778
- # A task definition must be specified if the service is using the `ECS`
779
- # deployment controller.
778
+ # A task definition must be specified if the service is using either the
779
+ # `ECS` or `CODE_DEPLOY` deployment controllers.
780
780
  #
781
781
  # @option params [Array<Types::LoadBalancer>] :load_balancers
782
782
  # A load balancer object representing the load balancers to use with
@@ -785,11 +785,11 @@ module Aws::ECS
785
785
  #
786
786
  # If the service is using the rolling update (`ECS`) deployment
787
787
  # controller and using either an Application Load Balancer or Network
788
- # Load Balancer, you can specify multiple target groups to attach to the
789
- # service. The service-linked role is required for services that make
790
- # use of multiple target groups. For more information, see [Using
791
- # Service-Linked Roles for Amazon ECS][2] in the *Amazon Elastic
792
- # Container Service Developer Guide*.
788
+ # Load Balancer, you must specify one or more target group ARNs to
789
+ # attach to the service. The service-linked role is required for
790
+ # services that make use of multiple target groups. For more
791
+ # information, see [Using Service-Linked Roles for Amazon ECS][2] in the
792
+ # *Amazon Elastic Container Service Developer Guide*.
793
793
  #
794
794
  # If the service is using the `CODE_DEPLOY` deployment controller, the
795
795
  # service is required to use either an Application Load Balancer or
@@ -812,15 +812,17 @@ module Aws::ECS
812
812
  # For Application Load Balancers and Network Load Balancers, this object
813
813
  # must contain the load balancer target group ARN, the container name
814
814
  # (as it appears in a container definition), and the container port to
815
- # access from the load balancer. When a task from this service is placed
816
- # on a container instance, the container instance and port combination
817
- # is registered as a target in the target group specified here.
815
+ # access from the load balancer. The load balancer name parameter must
816
+ # be omitted. When a task from this service is placed on a container
817
+ # instance, the container instance and port combination is registered as
818
+ # a target in the target group specified here.
818
819
  #
819
820
  # For Classic Load Balancers, this object must contain the load balancer
820
821
  # name, the container name (as it appears in a container definition),
821
- # and the container port to access from the load balancer. When a task
822
- # from this service is placed on a container instance, the container
823
- # instance is registered with the load balancer specified here.
822
+ # and the container port to access from the load balancer. The target
823
+ # group ARN parameter must be omitted. When a task from this service is
824
+ # placed on a container instance, the container instance is registered
825
+ # with the load balancer specified here.
824
826
  #
825
827
  # Services with tasks that use the `awsvpc` network mode (for example,
826
828
  # those with the Fargate launch type) only support Application Load
@@ -2477,6 +2479,10 @@ module Aws::ECS
2477
2479
  # resp.task_definition.volumes[0].efs_volume_configuration.transit_encryption_port #=> Integer
2478
2480
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.access_point_id #=> String
2479
2481
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.iam #=> String, one of "ENABLED", "DISABLED"
2482
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.file_system_id #=> String
2483
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.root_directory #=> String
2484
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.credentials_parameter #=> String
2485
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.domain #=> String
2480
2486
  # resp.task_definition.status #=> String, one of "ACTIVE", "INACTIVE"
2481
2487
  # resp.task_definition.requires_attributes #=> Array
2482
2488
  # resp.task_definition.requires_attributes[0].name #=> String
@@ -3345,6 +3351,10 @@ module Aws::ECS
3345
3351
  # resp.task_definition.volumes[0].efs_volume_configuration.transit_encryption_port #=> Integer
3346
3352
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.access_point_id #=> String
3347
3353
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.iam #=> String, one of "ENABLED", "DISABLED"
3354
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.file_system_id #=> String
3355
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.root_directory #=> String
3356
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.credentials_parameter #=> String
3357
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.domain #=> String
3348
3358
  # resp.task_definition.status #=> String, one of "ACTIVE", "INACTIVE"
3349
3359
  # resp.task_definition.requires_attributes #=> Array
3350
3360
  # resp.task_definition.requires_attributes[0].name #=> String
@@ -5305,8 +5315,10 @@ module Aws::ECS
5305
5315
  # constraints in the task definition and those specified at runtime).
5306
5316
  #
5307
5317
  # @option params [Array<String>] :requires_compatibilities
5308
- # The launch type required by the task. If no value is specified, it
5309
- # defaults to `EC2`.
5318
+ # The task launch type that Amazon ECS should validate the task
5319
+ # definition against. This ensures that the task definition parameters
5320
+ # are compatible with the specified launch type. If no value is
5321
+ # specified, it defaults to `EC2`.
5310
5322
  #
5311
5323
  # @option params [String] :cpu
5312
5324
  # The number of CPU units used by the task. It can be expressed as an
@@ -5741,6 +5753,14 @@ module Aws::ECS
5741
5753
  # iam: "ENABLED", # accepts ENABLED, DISABLED
5742
5754
  # },
5743
5755
  # },
5756
+ # fsx_windows_file_server_volume_configuration: {
5757
+ # file_system_id: "String", # required
5758
+ # root_directory: "String", # required
5759
+ # authorization_config: { # required
5760
+ # credentials_parameter: "String", # required
5761
+ # domain: "String", # required
5762
+ # },
5763
+ # },
5744
5764
  # },
5745
5765
  # ],
5746
5766
  # placement_constraints: [
@@ -5903,6 +5923,10 @@ module Aws::ECS
5903
5923
  # resp.task_definition.volumes[0].efs_volume_configuration.transit_encryption_port #=> Integer
5904
5924
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.access_point_id #=> String
5905
5925
  # resp.task_definition.volumes[0].efs_volume_configuration.authorization_config.iam #=> String, one of "ENABLED", "DISABLED"
5926
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.file_system_id #=> String
5927
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.root_directory #=> String
5928
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.credentials_parameter #=> String
5929
+ # resp.task_definition.volumes[0].fsx_windows_file_server_volume_configuration.authorization_config.domain #=> String
5906
5930
  # resp.task_definition.status #=> String, one of "ACTIVE", "INACTIVE"
5907
5931
  # resp.task_definition.requires_attributes #=> Array
5908
5932
  # resp.task_definition.requires_attributes[0].name #=> String
@@ -8088,7 +8112,7 @@ module Aws::ECS
8088
8112
  params: params,
8089
8113
  config: config)
8090
8114
  context[:gem_name] = 'aws-sdk-ecs'
8091
- context[:gem_version] = '1.70.0'
8115
+ context[:gem_version] = '1.71.0'
8092
8116
  Seahorse::Client::Request.new(handlers, context)
8093
8117
  end
8094
8118
 
@@ -132,6 +132,8 @@ module Aws::ECS
132
132
  EnvironmentFileType = Shapes::StringShape.new(name: 'EnvironmentFileType')
133
133
  EnvironmentFiles = Shapes::ListShape.new(name: 'EnvironmentFiles')
134
134
  EnvironmentVariables = Shapes::ListShape.new(name: 'EnvironmentVariables')
135
+ FSxWindowsFileServerAuthorizationConfig = Shapes::StructureShape.new(name: 'FSxWindowsFileServerAuthorizationConfig')
136
+ FSxWindowsFileServerVolumeConfiguration = Shapes::StructureShape.new(name: 'FSxWindowsFileServerVolumeConfiguration')
135
137
  Failure = Shapes::StructureShape.new(name: 'Failure')
136
138
  Failures = Shapes::ListShape.new(name: 'Failures')
137
139
  FirelensConfiguration = Shapes::StructureShape.new(name: 'FirelensConfiguration')
@@ -796,6 +798,15 @@ module Aws::ECS
796
798
 
797
799
  EnvironmentVariables.member = Shapes::ShapeRef.new(shape: KeyValuePair)
798
800
 
801
+ FSxWindowsFileServerAuthorizationConfig.add_member(:credentials_parameter, Shapes::ShapeRef.new(shape: String, required: true, location_name: "credentialsParameter"))
802
+ FSxWindowsFileServerAuthorizationConfig.add_member(:domain, Shapes::ShapeRef.new(shape: String, required: true, location_name: "domain"))
803
+ FSxWindowsFileServerAuthorizationConfig.struct_class = Types::FSxWindowsFileServerAuthorizationConfig
804
+
805
+ FSxWindowsFileServerVolumeConfiguration.add_member(:file_system_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "fileSystemId"))
806
+ FSxWindowsFileServerVolumeConfiguration.add_member(:root_directory, Shapes::ShapeRef.new(shape: String, required: true, location_name: "rootDirectory"))
807
+ FSxWindowsFileServerVolumeConfiguration.add_member(:authorization_config, Shapes::ShapeRef.new(shape: FSxWindowsFileServerAuthorizationConfig, required: true, location_name: "authorizationConfig"))
808
+ FSxWindowsFileServerVolumeConfiguration.struct_class = Types::FSxWindowsFileServerVolumeConfiguration
809
+
799
810
  Failure.add_member(:arn, Shapes::ShapeRef.new(shape: String, location_name: "arn"))
800
811
  Failure.add_member(:reason, Shapes::ShapeRef.new(shape: String, location_name: "reason"))
801
812
  Failure.add_member(:detail, Shapes::ShapeRef.new(shape: String, location_name: "detail"))
@@ -1515,6 +1526,7 @@ module Aws::ECS
1515
1526
  Volume.add_member(:host, Shapes::ShapeRef.new(shape: HostVolumeProperties, location_name: "host"))
1516
1527
  Volume.add_member(:docker_volume_configuration, Shapes::ShapeRef.new(shape: DockerVolumeConfiguration, location_name: "dockerVolumeConfiguration"))
1517
1528
  Volume.add_member(:efs_volume_configuration, Shapes::ShapeRef.new(shape: EFSVolumeConfiguration, location_name: "efsVolumeConfiguration"))
1529
+ Volume.add_member(:fsx_windows_file_server_volume_configuration, Shapes::ShapeRef.new(shape: FSxWindowsFileServerVolumeConfiguration, location_name: "fsxWindowsFileServerVolumeConfiguration"))
1518
1530
  Volume.struct_class = Types::Volume
1519
1531
 
1520
1532
  VolumeFrom.add_member(:source_container, Shapes::ShapeRef.new(shape: String, location_name: "sourceContainer"))
@@ -97,14 +97,18 @@ module Aws::ECS
97
97
  # }
98
98
  #
99
99
  # @!attribute [rw] name
100
- # The name of the attribute. Up to 128 letters (uppercase and
101
- # lowercase), numbers, hyphens, underscores, and periods are allowed.
100
+ # The name of the attribute. The `name` must contain between 1 and 128
101
+ # characters and name may contain letters (uppercase and lowercase),
102
+ # numbers, hyphens, underscores, forward slashes, back slashes, or
103
+ # periods.
102
104
  # @return [String]
103
105
  #
104
106
  # @!attribute [rw] value
105
- # The value of the attribute. Up to 128 letters (uppercase and
106
- # lowercase), numbers, hyphens, underscores, periods, at signs (@),
107
- # forward slashes, colons, and spaces are allowed.
107
+ # The value of the attribute. The `value` must contain between 1 and
108
+ # 128 characters and may contain letters (uppercase and lowercase),
109
+ # numbers, hyphens, underscores, periods, at signs (@), forward
110
+ # slashes, back slashes, colons, or spaces. The value cannot contain
111
+ # any leading or trailing whitespace.
108
112
  # @return [String]
109
113
  #
110
114
  # @!attribute [rw] target_type
@@ -210,8 +214,9 @@ module Aws::ECS
210
214
  # }
211
215
  #
212
216
  # @!attribute [rw] subnets
213
- # The subnets associated with the task or service. There is a limit of
214
- # 16 subnets that can be specified per `AwsVpcConfiguration`.
217
+ # The IDs of the subnets associated with the task or service. There is
218
+ # a limit of 16 subnets that can be specified per
219
+ # `AwsVpcConfiguration`.
215
220
  #
216
221
  # <note markdown="1"> All specified subnets must be from the same VPC.
217
222
  #
@@ -219,10 +224,10 @@ module Aws::ECS
219
224
  # @return [Array<String>]
220
225
  #
221
226
  # @!attribute [rw] security_groups
222
- # The security groups associated with the task or service. If you do
223
- # not specify a security group, the default security group for the VPC
224
- # is used. There is a limit of 5 security groups that can be specified
225
- # per `AwsVpcConfiguration`.
227
+ # The IDs of the security groups associated with the task or service.
228
+ # If you do not specify a security group, the default security group
229
+ # for the VPC is used. There is a limit of 5 security groups that can
230
+ # be specified per `AwsVpcConfiguration`.
226
231
  #
227
232
  # <note markdown="1"> All specified security groups must be from the same VPC.
228
233
  #
@@ -919,7 +924,7 @@ module Aws::ECS
919
924
  #
920
925
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
921
926
  # [2]: https://docs.docker.com/engine/api/v1.35/
922
- # [3]: https://docs.docker.com/engine/reference/run/
927
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
923
928
  # @return [String]
924
929
  #
925
930
  # @!attribute [rw] image
@@ -958,7 +963,7 @@ module Aws::ECS
958
963
  #
959
964
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
960
965
  # [2]: https://docs.docker.com/engine/api/v1.35/
961
- # [3]: https://docs.docker.com/engine/reference/run/
966
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
962
967
  # @return [String]
963
968
  #
964
969
  # @!attribute [rw] repository_credentials
@@ -1016,13 +1021,14 @@ module Aws::ECS
1016
1021
  # On Windows container instances, the CPU limit is enforced as an
1017
1022
  # absolute limit, or a quota. Windows containers only have access to
1018
1023
  # the specified amount of CPU that is described in the task
1019
- # definition.
1024
+ # definition. A null or zero CPU value is passed to Docker as `0`,
1025
+ # which Windows interprets as 1% of one CPU.
1020
1026
  #
1021
1027
  #
1022
1028
  #
1023
1029
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1024
1030
  # [2]: https://docs.docker.com/engine/api/v1.35/
1025
- # [3]: https://docs.docker.com/engine/reference/run/
1031
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1026
1032
  # [4]: http://aws.amazon.com/ec2/instance-types/
1027
1033
  # [5]: https://docs.docker.com/engine/reference/run/#cpu-share-constraint
1028
1034
  # @return [Integer]
@@ -1054,7 +1060,7 @@ module Aws::ECS
1054
1060
  #
1055
1061
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1056
1062
  # [2]: https://docs.docker.com/engine/api/v1.35/
1057
- # [3]: https://docs.docker.com/engine/reference/run/
1063
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1058
1064
  # @return [Integer]
1059
1065
  #
1060
1066
  # @!attribute [rw] memory_reservation
@@ -1092,7 +1098,7 @@ module Aws::ECS
1092
1098
  #
1093
1099
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1094
1100
  # [2]: https://docs.docker.com/engine/api/v1.35/
1095
- # [3]: https://docs.docker.com/engine/reference/run/
1101
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1096
1102
  # @return [Integer]
1097
1103
  #
1098
1104
  # @!attribute [rw] links
@@ -1107,7 +1113,8 @@ module Aws::ECS
1107
1113
  # container][2] section of the [Docker Remote API][3] and the `--link`
1108
1114
  # option to [docker run][4].
1109
1115
  #
1110
- # <note markdown="1"> This parameter is not supported for Windows containers.
1116
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1117
+ # use the awsvpc network mode.
1111
1118
  #
1112
1119
  # </note>
1113
1120
  #
@@ -1121,7 +1128,7 @@ module Aws::ECS
1121
1128
  # [1]: https://docs.docker.com/network/links/
1122
1129
  # [2]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1123
1130
  # [3]: https://docs.docker.com/engine/api/v1.35/
1124
- # [4]: https://docs.docker.com/engine/reference/run/
1131
+ # [4]: https://docs.docker.com/engine/reference/run/#security-configuration
1125
1132
  # @return [Array<String>]
1126
1133
  #
1127
1134
  # @!attribute [rw] port_mappings
@@ -1158,7 +1165,7 @@ module Aws::ECS
1158
1165
  #
1159
1166
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1160
1167
  # [2]: https://docs.docker.com/engine/api/v1.35/
1161
- # [3]: https://docs.docker.com/engine/reference/run/
1168
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1162
1169
  # @return [Array<Types::PortMapping>]
1163
1170
  #
1164
1171
  # @!attribute [rw] essential
@@ -1197,7 +1204,7 @@ module Aws::ECS
1197
1204
  #
1198
1205
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1199
1206
  # [2]: https://docs.docker.com/engine/api/v1.35/
1200
- # [3]: https://docs.docker.com/engine/reference/run/
1207
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1201
1208
  # [4]: https://docs.docker.com/engine/reference/builder/#entrypoint
1202
1209
  # @return [Array<String>]
1203
1210
  #
@@ -1214,7 +1221,7 @@ module Aws::ECS
1214
1221
  #
1215
1222
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1216
1223
  # [2]: https://docs.docker.com/engine/api/v1.35/
1217
- # [3]: https://docs.docker.com/engine/reference/run/
1224
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1218
1225
  # [4]: https://docs.docker.com/engine/reference/builder/#cmd
1219
1226
  # @return [Array<String>]
1220
1227
  #
@@ -1230,7 +1237,7 @@ module Aws::ECS
1230
1237
  #
1231
1238
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1232
1239
  # [2]: https://docs.docker.com/engine/api/v1.35/
1233
- # [3]: https://docs.docker.com/engine/reference/run/
1240
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1234
1241
  # @return [Array<Types::KeyValuePair>]
1235
1242
  #
1236
1243
  # @!attribute [rw] environment_files
@@ -1259,7 +1266,7 @@ module Aws::ECS
1259
1266
  #
1260
1267
  #
1261
1268
  #
1262
- # [1]: https://docs.docker.com/engine/reference/run/
1269
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
1263
1270
  # [2]: https://docs.docker.com/compose/env-file/
1264
1271
  # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html
1265
1272
  # @return [Array<Types::EnvironmentFile>]
@@ -1279,7 +1286,7 @@ module Aws::ECS
1279
1286
  #
1280
1287
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1281
1288
  # [2]: https://docs.docker.com/engine/api/v1.35/
1282
- # [3]: https://docs.docker.com/engine/reference/run/
1289
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1283
1290
  # @return [Array<Types::MountPoint>]
1284
1291
  #
1285
1292
  # @!attribute [rw] volumes_from
@@ -1291,7 +1298,7 @@ module Aws::ECS
1291
1298
  #
1292
1299
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1293
1300
  # [2]: https://docs.docker.com/engine/api/v1.35/
1294
- # [3]: https://docs.docker.com/engine/reference/run/
1301
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1295
1302
  # @return [Array<Types::VolumeFrom>]
1296
1303
  #
1297
1304
  # @!attribute [rw] linux_parameters
@@ -1353,25 +1360,23 @@ module Aws::ECS
1353
1360
  # give up and not start. This results in the task transitioning to a
1354
1361
  # `STOPPED` state.
1355
1362
  #
1363
+ # <note markdown="1"> When the `ECS_CONTAINER_START_TIMEOUT` container agent configuration
1364
+ # variable is used, it is enforced indendently from this start timeout
1365
+ # value.
1366
+ #
1367
+ # </note>
1368
+ #
1356
1369
  # For tasks using the Fargate launch type, this parameter requires
1357
- # that the task or service uses platform version 1.3.0 or later. If
1358
- # this parameter is not specified, the default value of 3 minutes is
1359
- # used.
1370
+ # that the task or service uses platform version 1.3.0 or later.
1360
1371
  #
1361
- # For tasks using the EC2 launch type, if the `startTimeout` parameter
1362
- # is not specified, the value set for the Amazon ECS container agent
1363
- # configuration variable `ECS_CONTAINER_START_TIMEOUT` is used by
1364
- # default. If neither the `startTimeout` parameter or the
1365
- # `ECS_CONTAINER_START_TIMEOUT` agent configuration variable are set,
1366
- # then the default values of 3 minutes for Linux containers and 8
1367
- # minutes on Windows containers are used. Your container instances
1368
- # require at least version 1.26.0 of the container agent to enable a
1372
+ # For tasks using the EC2 launch type, your container instances
1373
+ # require at least version `1.26.0` of the container agent to enable a
1369
1374
  # container start timeout value. However, we recommend using the
1370
1375
  # latest container agent version. For information about checking your
1371
1376
  # agent version and updating to the latest version, see [Updating the
1372
1377
  # Amazon ECS Container Agent][1] in the *Amazon Elastic Container
1373
1378
  # Service Developer Guide*. If you are using an Amazon ECS-optimized
1374
- # Linux AMI, your instance needs at least version 1.26.0-1 of the
1379
+ # Linux AMI, your instance needs at least version `1.26.0-1` of the
1375
1380
  # `ecs-init` package. If your container instances are launched from
1376
1381
  # version `20190301` or later, then they contain the required versions
1377
1382
  # of the container agent and `ecs-init`. For more information, see
@@ -1433,7 +1438,7 @@ module Aws::ECS
1433
1438
  #
1434
1439
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1435
1440
  # [2]: https://docs.docker.com/engine/api/v1.35/
1436
- # [3]: https://docs.docker.com/engine/reference/run/
1441
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1437
1442
  # @return [String]
1438
1443
  #
1439
1444
  # @!attribute [rw] user
@@ -1456,7 +1461,8 @@ module Aws::ECS
1456
1461
  #
1457
1462
  # * `uid:group`
1458
1463
  #
1459
- # <note markdown="1"> This parameter is not supported for Windows containers.
1464
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1465
+ # use the awsvpc network mode.
1460
1466
  #
1461
1467
  # </note>
1462
1468
  #
@@ -1464,7 +1470,7 @@ module Aws::ECS
1464
1470
  #
1465
1471
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1466
1472
  # [2]: https://docs.docker.com/engine/api/v1.35/
1467
- # [3]: https://docs.docker.com/engine/reference/run/
1473
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1468
1474
  # @return [String]
1469
1475
  #
1470
1476
  # @!attribute [rw] working_directory
@@ -1477,7 +1483,7 @@ module Aws::ECS
1477
1483
  #
1478
1484
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1479
1485
  # [2]: https://docs.docker.com/engine/api/v1.35/
1480
- # [3]: https://docs.docker.com/engine/reference/run/
1486
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1481
1487
  # @return [String]
1482
1488
  #
1483
1489
  # @!attribute [rw] disable_networking
@@ -1485,7 +1491,8 @@ module Aws::ECS
1485
1491
  # container. This parameter maps to `NetworkDisabled` in the [Create a
1486
1492
  # container][1] section of the [Docker Remote API][2].
1487
1493
  #
1488
- # <note markdown="1"> This parameter is not supported for Windows containers.
1494
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1495
+ # use the awsvpc network mode.
1489
1496
  #
1490
1497
  # </note>
1491
1498
  #
@@ -1511,7 +1518,7 @@ module Aws::ECS
1511
1518
  #
1512
1519
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1513
1520
  # [2]: https://docs.docker.com/engine/api/v1.35/
1514
- # [3]: https://docs.docker.com/engine/reference/run/
1521
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1515
1522
  # @return [Boolean]
1516
1523
  #
1517
1524
  # @!attribute [rw] readonly_root_filesystem
@@ -1520,7 +1527,8 @@ module Aws::ECS
1520
1527
  # the [Create a container][1] section of the [Docker Remote API][2]
1521
1528
  # and the `--read-only` option to [docker run][3].
1522
1529
  #
1523
- # <note markdown="1"> This parameter is not supported for Windows containers.
1530
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1531
+ # use the awsvpc network mode.
1524
1532
  #
1525
1533
  # </note>
1526
1534
  #
@@ -1528,7 +1536,7 @@ module Aws::ECS
1528
1536
  #
1529
1537
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1530
1538
  # [2]: https://docs.docker.com/engine/api/v1.35/
1531
- # [3]: https://docs.docker.com/engine/reference/run/
1539
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1532
1540
  # @return [Boolean]
1533
1541
  #
1534
1542
  # @!attribute [rw] dns_servers
@@ -1537,7 +1545,8 @@ module Aws::ECS
1537
1545
  # the [Docker Remote API][2] and the `--dns` option to [docker
1538
1546
  # run][3].
1539
1547
  #
1540
- # <note markdown="1"> This parameter is not supported for Windows containers.
1548
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1549
+ # use the awsvpc network mode.
1541
1550
  #
1542
1551
  # </note>
1543
1552
  #
@@ -1545,7 +1554,7 @@ module Aws::ECS
1545
1554
  #
1546
1555
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1547
1556
  # [2]: https://docs.docker.com/engine/api/v1.35/
1548
- # [3]: https://docs.docker.com/engine/reference/run/
1557
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1549
1558
  # @return [Array<String>]
1550
1559
  #
1551
1560
  # @!attribute [rw] dns_search_domains
@@ -1554,7 +1563,8 @@ module Aws::ECS
1554
1563
  # section of the [Docker Remote API][2] and the `--dns-search` option
1555
1564
  # to [docker run][3].
1556
1565
  #
1557
- # <note markdown="1"> This parameter is not supported for Windows containers.
1566
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1567
+ # use the awsvpc network mode.
1558
1568
  #
1559
1569
  # </note>
1560
1570
  #
@@ -1562,7 +1572,7 @@ module Aws::ECS
1562
1572
  #
1563
1573
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1564
1574
  # [2]: https://docs.docker.com/engine/api/v1.35/
1565
- # [3]: https://docs.docker.com/engine/reference/run/
1575
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1566
1576
  # @return [Array<String>]
1567
1577
  #
1568
1578
  # @!attribute [rw] extra_hosts
@@ -1580,7 +1590,7 @@ module Aws::ECS
1580
1590
  #
1581
1591
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1582
1592
  # [2]: https://docs.docker.com/engine/api/v1.35/
1583
- # [3]: https://docs.docker.com/engine/reference/run/
1593
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1584
1594
  # @return [Array<Types::HostEntry>]
1585
1595
  #
1586
1596
  # @!attribute [rw] docker_security_options
@@ -1607,12 +1617,18 @@ module Aws::ECS
1607
1617
  #
1608
1618
  # </note>
1609
1619
  #
1620
+ # For more information about valid values, see [Docker Run Security
1621
+ # Configuration][4].
1622
+ #
1623
+ # Valid values: "no-new-privileges" \| "apparmor:PROFILE" \|
1624
+ # "label:value" \| "credentialspec:CredentialSpecFilePath"
1625
+ #
1610
1626
  #
1611
1627
  #
1612
1628
  # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html
1613
1629
  # [2]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1614
1630
  # [3]: https://docs.docker.com/engine/api/v1.35/
1615
- # [4]: https://docs.docker.com/engine/reference/run/
1631
+ # [4]: https://docs.docker.com/engine/reference/run/#security-configuration
1616
1632
  # [5]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html
1617
1633
  # @return [Array<String>]
1618
1634
  #
@@ -1627,7 +1643,7 @@ module Aws::ECS
1627
1643
  #
1628
1644
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1629
1645
  # [2]: https://docs.docker.com/engine/api/v1.35/
1630
- # [3]: https://docs.docker.com/engine/reference/run/
1646
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1631
1647
  # @return [Boolean]
1632
1648
  #
1633
1649
  # @!attribute [rw] pseudo_terminal
@@ -1639,7 +1655,7 @@ module Aws::ECS
1639
1655
  #
1640
1656
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1641
1657
  # [2]: https://docs.docker.com/engine/api/v1.35/
1642
- # [3]: https://docs.docker.com/engine/reference/run/
1658
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1643
1659
  # @return [Boolean]
1644
1660
  #
1645
1661
  # @!attribute [rw] docker_labels
@@ -1656,7 +1672,7 @@ module Aws::ECS
1656
1672
  #
1657
1673
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1658
1674
  # [2]: https://docs.docker.com/engine/api/v1.35/
1659
- # [3]: https://docs.docker.com/engine/reference/run/
1675
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1660
1676
  # @return [Hash<String,String>]
1661
1677
  #
1662
1678
  # @!attribute [rw] ulimits
@@ -1671,7 +1687,8 @@ module Aws::ECS
1671
1687
  # log in to your container instance and run the following command:
1672
1688
  # `sudo docker version --format '\{\{.Server.APIVersion\}\}'`
1673
1689
  #
1674
- # <note markdown="1"> This parameter is not supported for Windows containers.
1690
+ # <note markdown="1"> This parameter is not supported for Windows containers or tasks that
1691
+ # use the awsvpc network mode.
1675
1692
  #
1676
1693
  # </note>
1677
1694
  #
@@ -1679,7 +1696,7 @@ module Aws::ECS
1679
1696
  #
1680
1697
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1681
1698
  # [2]: https://docs.docker.com/engine/api/v1.35/
1682
- # [3]: https://docs.docker.com/engine/reference/run/
1699
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1683
1700
  # @return [Array<Types::Ulimit>]
1684
1701
  #
1685
1702
  # @!attribute [rw] log_configuration
@@ -1724,7 +1741,7 @@ module Aws::ECS
1724
1741
  #
1725
1742
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1726
1743
  # [2]: https://docs.docker.com/engine/api/v1.35/
1727
- # [3]: https://docs.docker.com/engine/reference/run/
1744
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1728
1745
  # [4]: https://docs.docker.com/engine/admin/logging/overview/
1729
1746
  # [5]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html
1730
1747
  # @return [Types::LogConfiguration]
@@ -1739,7 +1756,7 @@ module Aws::ECS
1739
1756
  #
1740
1757
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1741
1758
  # [2]: https://docs.docker.com/engine/api/v1.35/
1742
- # [3]: https://docs.docker.com/engine/reference/run/
1759
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1743
1760
  # @return [Types::HealthCheck]
1744
1761
  #
1745
1762
  # @!attribute [rw] system_controls
@@ -1763,7 +1780,7 @@ module Aws::ECS
1763
1780
  #
1764
1781
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
1765
1782
  # [2]: https://docs.docker.com/engine/api/v1.35/
1766
- # [3]: https://docs.docker.com/engine/reference/run/
1783
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
1767
1784
  # @return [Array<Types::SystemControl>]
1768
1785
  #
1769
1786
  # @!attribute [rw] resource_requirements
@@ -1878,10 +1895,12 @@ module Aws::ECS
1878
1895
  # * `COMPLETE` - This condition validates that a dependent container
1879
1896
  # runs to completion (exits) before permitting other containers to
1880
1897
  # start. This can be useful for nonessential containers that run a
1881
- # script and then exit.
1898
+ # script and then exit. This condition cannot be set on an essential
1899
+ # container.
1882
1900
  #
1883
1901
  # * `SUCCESS` - This condition is the same as `COMPLETE`, but it also
1884
- # requires that the container exits with a `zero` status.
1902
+ # requires that the container exits with a `zero` status. This
1903
+ # condition cannot be set on an essential container.
1885
1904
  #
1886
1905
  # * `HEALTHY` - This condition validates that the dependent container
1887
1906
  # passes its Docker health check before permitting other containers
@@ -2566,8 +2585,8 @@ module Aws::ECS
2566
2585
  # task definition to run in your service. If a `revision` is not
2567
2586
  # specified, the latest `ACTIVE` revision is used.
2568
2587
  #
2569
- # A task definition must be specified if the service is using the
2570
- # `ECS` deployment controller.
2588
+ # A task definition must be specified if the service is using either
2589
+ # the `ECS` or `CODE_DEPLOY` deployment controllers.
2571
2590
  # @return [String]
2572
2591
  #
2573
2592
  # @!attribute [rw] load_balancers
@@ -2577,11 +2596,11 @@ module Aws::ECS
2577
2596
  #
2578
2597
  # If the service is using the rolling update (`ECS`) deployment
2579
2598
  # controller and using either an Application Load Balancer or Network
2580
- # Load Balancer, you can specify multiple target groups to attach to
2581
- # the service. The service-linked role is required for services that
2582
- # make use of multiple target groups. For more information, see [Using
2583
- # Service-Linked Roles for Amazon ECS][2] in the *Amazon Elastic
2584
- # Container Service Developer Guide*.
2599
+ # Load Balancer, you must specify one or more target group ARNs to
2600
+ # attach to the service. The service-linked role is required for
2601
+ # services that make use of multiple target groups. For more
2602
+ # information, see [Using Service-Linked Roles for Amazon ECS][2] in
2603
+ # the *Amazon Elastic Container Service Developer Guide*.
2585
2604
  #
2586
2605
  # If the service is using the `CODE_DEPLOY` deployment controller, the
2587
2606
  # service is required to use either an Application Load Balancer or
@@ -2604,17 +2623,19 @@ module Aws::ECS
2604
2623
  # For Application Load Balancers and Network Load Balancers, this
2605
2624
  # object must contain the load balancer target group ARN, the
2606
2625
  # container name (as it appears in a container definition), and the
2607
- # container port to access from the load balancer. When a task from
2608
- # this service is placed on a container instance, the container
2609
- # instance and port combination is registered as a target in the
2610
- # target group specified here.
2626
+ # container port to access from the load balancer. The load balancer
2627
+ # name parameter must be omitted. When a task from this service is
2628
+ # placed on a container instance, the container instance and port
2629
+ # combination is registered as a target in the target group specified
2630
+ # here.
2611
2631
  #
2612
2632
  # For Classic Load Balancers, this object must contain the load
2613
2633
  # balancer name, the container name (as it appears in a container
2614
2634
  # definition), and the container port to access from the load
2615
- # balancer. When a task from this service is placed on a container
2616
- # instance, the container instance is registered with the load
2617
- # balancer specified here.
2635
+ # balancer. The target group ARN parameter must be omitted. When a
2636
+ # task from this service is placed on a container instance, the
2637
+ # container instance is registered with the load balancer specified
2638
+ # here.
2618
2639
  #
2619
2640
  # Services with tasks that use the `awsvpc` network mode (for example,
2620
2641
  # those with the Fargate launch type) only support Application Load
@@ -4393,11 +4414,12 @@ module Aws::ECS
4393
4414
  # @!attribute [rw] access_point_id
4394
4415
  # The Amazon EFS access point ID to use. If an access point is
4395
4416
  # specified, the root directory value specified in the
4396
- # `EFSVolumeConfiguration` will be relative to the directory set for
4397
- # the access point. If an access point is used, transit encryption
4398
- # must be enabled in the `EFSVolumeConfiguration`. For more
4399
- # information, see [Working with Amazon EFS Access Points][1] in the
4400
- # *Amazon Elastic File System User Guide*.
4417
+ # `EFSVolumeConfiguration` must either be omitted or set to `/` which
4418
+ # will enforce the path set on the EFS access point. If an access
4419
+ # point is used, transit encryption must be enabled in the
4420
+ # `EFSVolumeConfiguration`. For more information, see [Working with
4421
+ # Amazon EFS Access Points][1] in the *Amazon Elastic File System User
4422
+ # Guide*.
4401
4423
  #
4402
4424
  #
4403
4425
  #
@@ -4458,6 +4480,10 @@ module Aws::ECS
4458
4480
  # directory inside the host. If this parameter is omitted, the root of
4459
4481
  # the Amazon EFS volume will be used. Specifying `/` will have the
4460
4482
  # same effect as omitting this parameter.
4483
+ #
4484
+ # If an EFS access point is specified in the `authorizationConfig`,
4485
+ # the root directory parameter must either be omitted or set to `/`
4486
+ # which will enforce the path set on the EFS access point.
4461
4487
  # @return [String]
4462
4488
  #
4463
4489
  # @!attribute [rw] transit_encryption
@@ -4553,7 +4579,121 @@ module Aws::ECS
4553
4579
  include Aws::Structure
4554
4580
  end
4555
4581
 
4556
- # A failed resource.
4582
+ # The authorization configuration details for Amazon FSx for Windows
4583
+ # File Server file system. See
4584
+ # [FSxWindowsFileServerVolumeConfiguration][1] in the *Amazon Elastic
4585
+ # Container Service API Reference*.
4586
+ #
4587
+ # For more information and the input format, see [Amazon FSx for Windows
4588
+ # File Server Volumes][2] in the *Amazon Elastic Container Service
4589
+ # Developer Guide*.
4590
+ #
4591
+ #
4592
+ #
4593
+ # [1]: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_FSxWindowsFileServerVolumeConfiguration.html
4594
+ # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/wfsx-volumes.html
4595
+ #
4596
+ # @note When making an API call, you may pass FSxWindowsFileServerAuthorizationConfig
4597
+ # data as a hash:
4598
+ #
4599
+ # {
4600
+ # credentials_parameter: "String", # required
4601
+ # domain: "String", # required
4602
+ # }
4603
+ #
4604
+ # @!attribute [rw] credentials_parameter
4605
+ # The authorization credential option to use.
4606
+ #
4607
+ # The authorization credential options can be provided using either
4608
+ # the AWS Secrets Manager ARN or the AWS Systems Manager ARN. The ARNs
4609
+ # refer to the stored credentials.
4610
+ #
4611
+ # **options:**
4612
+ #
4613
+ # * [ARN][1] of an [AWS Secrets Manager][2] secret.
4614
+ #
4615
+ # * [ARN][1] of an [AWS Systems Manager][3] parameter.
4616
+ #
4617
+ #
4618
+ #
4619
+ # [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
4620
+ # [2]: https://docs.aws.amazon.com/secretsmanager
4621
+ # [3]: https://docs.aws.amazon.com/systems-manager/latest/userguide/integration-ps-secretsmanager.html
4622
+ # @return [String]
4623
+ #
4624
+ # @!attribute [rw] domain
4625
+ # A fully qualified domain name hosted by an [AWS Directory
4626
+ # Service][1] Managed Microsoft AD (Active Directory) or self-hosted
4627
+ # EC2 AD.
4628
+ #
4629
+ #
4630
+ #
4631
+ # [1]: https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_microsoft_ad.html
4632
+ # @return [String]
4633
+ #
4634
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/FSxWindowsFileServerAuthorizationConfig AWS API Documentation
4635
+ #
4636
+ class FSxWindowsFileServerAuthorizationConfig < Struct.new(
4637
+ :credentials_parameter,
4638
+ :domain)
4639
+ SENSITIVE = []
4640
+ include Aws::Structure
4641
+ end
4642
+
4643
+ # This parameter is specified when you are using [Amazon FSx for Windows
4644
+ # File Server][1] file system for task storage.
4645
+ #
4646
+ # For more information and the input format, see [Amazon FSx for Windows
4647
+ # File Server Volumes][2] in the *Amazon Elastic Container Service
4648
+ # Developer Guide*.
4649
+ #
4650
+ #
4651
+ #
4652
+ # [1]: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/what-is.html
4653
+ # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/wfsx-volumes.html
4654
+ #
4655
+ # @note When making an API call, you may pass FSxWindowsFileServerVolumeConfiguration
4656
+ # data as a hash:
4657
+ #
4658
+ # {
4659
+ # file_system_id: "String", # required
4660
+ # root_directory: "String", # required
4661
+ # authorization_config: { # required
4662
+ # credentials_parameter: "String", # required
4663
+ # domain: "String", # required
4664
+ # },
4665
+ # }
4666
+ #
4667
+ # @!attribute [rw] file_system_id
4668
+ # The Amazon FSx for Windows File Server file system ID to use.
4669
+ # @return [String]
4670
+ #
4671
+ # @!attribute [rw] root_directory
4672
+ # The directory within the Amazon FSx for Windows File Server file
4673
+ # system to mount as the root directory inside the host.
4674
+ # @return [String]
4675
+ #
4676
+ # @!attribute [rw] authorization_config
4677
+ # The authorization configuration details for the Amazon FSx for
4678
+ # Windows File Server file system.
4679
+ # @return [Types::FSxWindowsFileServerAuthorizationConfig]
4680
+ #
4681
+ # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/FSxWindowsFileServerVolumeConfiguration AWS API Documentation
4682
+ #
4683
+ class FSxWindowsFileServerVolumeConfiguration < Struct.new(
4684
+ :file_system_id,
4685
+ :root_directory,
4686
+ :authorization_config)
4687
+ SENSITIVE = []
4688
+ include Aws::Structure
4689
+ end
4690
+
4691
+ # A failed resource. For a list of common causes, see [API failure
4692
+ # reasons][1] in the *Amazon Elastic Container Service Developer Guide*.
4693
+ #
4694
+ #
4695
+ #
4696
+ # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/api_failures_messages.html
4557
4697
  #
4558
4698
  # @!attribute [rw] arn
4559
4699
  # The Amazon Resource Name (ARN) of the failed resource.
@@ -4920,9 +5060,8 @@ module Aws::ECS
4920
5060
  # `CapAdd` in the [Create a container][1] section of the [Docker
4921
5061
  # Remote API][2] and the `--cap-add` option to [docker run][3].
4922
5062
  #
4923
- # <note markdown="1"> The `SYS_PTRACE` capability is supported for tasks that use the
4924
- # Fargate launch type if they are also using platform version 1.4.0.
4925
- # The other capabilities are not supported for any platform versions.
5063
+ # <note markdown="1"> Tasks launched on AWS Fargate only support adding the `SYS_PTRACE`
5064
+ # kernel capability.
4926
5065
  #
4927
5066
  # </note>
4928
5067
  #
@@ -4940,7 +5079,7 @@ module Aws::ECS
4940
5079
  #
4941
5080
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
4942
5081
  # [2]: https://docs.docker.com/engine/api/v1.35/
4943
- # [3]: https://docs.docker.com/engine/reference/run/
5082
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
4944
5083
  # @return [Array<String>]
4945
5084
  #
4946
5085
  # @!attribute [rw] drop
@@ -4963,7 +5102,7 @@ module Aws::ECS
4963
5102
  #
4964
5103
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
4965
5104
  # [2]: https://docs.docker.com/engine/api/v1.35/
4966
- # [3]: https://docs.docker.com/engine/reference/run/
5105
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
4967
5106
  # @return [Array<String>]
4968
5107
  #
4969
5108
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/KernelCapabilities AWS API Documentation
@@ -5066,7 +5205,7 @@ module Aws::ECS
5066
5205
  #
5067
5206
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
5068
5207
  # [2]: https://docs.docker.com/engine/api/v1.35/
5069
- # [3]: https://docs.docker.com/engine/reference/run/
5208
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
5070
5209
  # @return [Array<Types::Device>]
5071
5210
  #
5072
5211
  # @!attribute [rw] init_process_enabled
@@ -5080,7 +5219,7 @@ module Aws::ECS
5080
5219
  #
5081
5220
  #
5082
5221
  #
5083
- # [1]: https://docs.docker.com/engine/reference/run/
5222
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
5084
5223
  # @return [Boolean]
5085
5224
  #
5086
5225
  # @!attribute [rw] shared_memory_size
@@ -5094,7 +5233,7 @@ module Aws::ECS
5094
5233
  #
5095
5234
  #
5096
5235
  #
5097
- # [1]: https://docs.docker.com/engine/reference/run/
5236
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
5098
5237
  # @return [Integer]
5099
5238
  #
5100
5239
  # @!attribute [rw] tmpfs
@@ -5109,7 +5248,7 @@ module Aws::ECS
5109
5248
  #
5110
5249
  #
5111
5250
  #
5112
- # [1]: https://docs.docker.com/engine/reference/run/
5251
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
5113
5252
  # @return [Array<Types::Tmpfs>]
5114
5253
  #
5115
5254
  # @!attribute [rw] max_swap
@@ -5132,7 +5271,7 @@ module Aws::ECS
5132
5271
  #
5133
5272
  #
5134
5273
  #
5135
- # [1]: https://docs.docker.com/engine/reference/run/
5274
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
5136
5275
  # @return [Integer]
5137
5276
  #
5138
5277
  # @!attribute [rw] swappiness
@@ -5153,7 +5292,7 @@ module Aws::ECS
5153
5292
  #
5154
5293
  #
5155
5294
  #
5156
- # [1]: https://docs.docker.com/engine/reference/run/
5295
+ # [1]: https://docs.docker.com/engine/reference/run/#security-configuration
5157
5296
  # @return [Integer]
5158
5297
  #
5159
5298
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/LinuxParameters AWS API Documentation
@@ -6019,19 +6158,16 @@ module Aws::ECS
6019
6158
  include Aws::Structure
6020
6159
  end
6021
6160
 
6022
- # The log configuration specification for the container.
6161
+ # The log configuration for the container. This parameter maps to
6162
+ # `LogConfig` in the [Create a container][1] section of the [Docker
6163
+ # Remote API][2] and the `--log-driver` option to [ `docker run` ][3].
6023
6164
  #
6024
- # This parameter maps to `LogConfig` in the [Create a container][1]
6025
- # section of the [Docker Remote API][2] and the `--log-driver` option to
6026
- # [ `docker run` ][3]. By default, containers use the same logging
6027
- # driver that the Docker daemon uses; however the container may use a
6028
- # different logging driver than the Docker daemon by specifying a log
6029
- # driver with this parameter in the container definition. To use a
6030
- # different logging driver for a container, the log system must be
6031
- # configured properly on the container instance (or on a different log
6032
- # server for remote logging options). For more information on the
6033
- # options for different supported log drivers, see [Configure logging
6034
- # drivers][4] in the Docker documentation.
6165
+ # By default, containers use the same logging driver that the Docker
6166
+ # daemon uses; however the container may use a different logging driver
6167
+ # than the Docker daemon by specifying a log driver configuration in the
6168
+ # container definition. For more information on the options for
6169
+ # different supported log drivers, see [Configure logging drivers][4] in
6170
+ # the Docker documentation.
6035
6171
  #
6036
6172
  # The following should be noted when specifying a log configuration for
6037
6173
  # your containers:
@@ -6044,19 +6180,19 @@ module Aws::ECS
6044
6180
  # * This parameter requires version 1.18 of the Docker Remote API or
6045
6181
  # greater on your container instance.
6046
6182
  #
6047
- # * For tasks using the EC2 launch type, the Amazon ECS container agent
6048
- # running on a container instance must register the logging drivers
6049
- # available on that instance with the `ECS_AVAILABLE_LOGGING_DRIVERS`
6050
- # environment variable before containers placed on that instance can
6051
- # use these log configuration options. For more information, see
6052
- # [Amazon ECS Container Agent Configuration][5] in the *Amazon Elastic
6053
- # Container Service Developer Guide*.
6183
+ # * For tasks hosted on Amazon EC2 instances, the Amazon ECS container
6184
+ # agent must register the available logging drivers with the
6185
+ # `ECS_AVAILABLE_LOGGING_DRIVERS` environment variable before
6186
+ # containers placed on that instance can use these log configuration
6187
+ # options. For more information, see [Amazon ECS container agent
6188
+ # configuration][5] in the *Amazon Elastic Container Service Developer
6189
+ # Guide*.
6054
6190
  #
6055
- # * For tasks using the Fargate launch type, because you do not have
6056
- # access to the underlying infrastructure your tasks are hosted on,
6057
- # any additional software needed will have to be installed outside of
6058
- # the task. For example, the Fluentd output aggregators or a remote
6059
- # host running Logstash to send Gelf logs to.
6191
+ # * For tasks on AWS Fargate, because you do not have access to the
6192
+ # underlying infrastructure your tasks are hosted on, any additional
6193
+ # software needed will have to be installed outside of the task. For
6194
+ # example, the Fluentd output aggregators or a remote host running
6195
+ # Logstash to send Gelf logs to.
6060
6196
  #
6061
6197
  #
6062
6198
  #
@@ -6083,23 +6219,21 @@ module Aws::ECS
6083
6219
  # }
6084
6220
  #
6085
6221
  # @!attribute [rw] log_driver
6086
- # The log driver to use for the container. The valid values listed
6087
- # earlier are log drivers that the Amazon ECS container agent can
6088
- # communicate with by default.
6222
+ # The log driver to use for the container.
6089
6223
  #
6090
- # For tasks using the Fargate launch type, the supported log drivers
6091
- # are `awslogs`, `splunk`, and `awsfirelens`.
6224
+ # For tasks on AWS Fargate, the supported log drivers are `awslogs`,
6225
+ # `splunk`, and `awsfirelens`.
6092
6226
  #
6093
- # For tasks using the EC2 launch type, the supported log drivers are
6094
- # `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
6227
+ # For tasks hosted on Amazon EC2 instances, the supported log drivers
6228
+ # are `awslogs`, `fluentd`, `gelf`, `json-file`, `journald`,
6095
6229
  # `logentries`,`syslog`, `splunk`, and `awsfirelens`.
6096
6230
  #
6097
6231
  # For more information about using the `awslogs` log driver, see
6098
- # [Using the awslogs Log Driver][1] in the *Amazon Elastic Container
6232
+ # [Using the awslogs log driver][1] in the *Amazon Elastic Container
6099
6233
  # Service Developer Guide*.
6100
6234
  #
6101
6235
  # For more information about using the `awsfirelens` log driver, see
6102
- # [Custom Log Routing][2] in the *Amazon Elastic Container Service
6236
+ # [Custom log routing][2] in the *Amazon Elastic Container Service
6103
6237
  # Developer Guide*.
6104
6238
  #
6105
6239
  # <note markdown="1"> If you have a custom driver that is not listed, you can fork the
@@ -6186,15 +6320,27 @@ module Aws::ECS
6186
6320
  # @return [Integer]
6187
6321
  #
6188
6322
  # @!attribute [rw] minimum_scaling_step_size
6189
- # The minimum number of container instances that Amazon ECS will scale
6190
- # in or scale out at one time. If this parameter is omitted, the
6191
- # default value of `1` is used.
6323
+ # The minimum number of Amazon EC2 instances that Amazon ECS will
6324
+ # scale out at one time. The scale in process is not affected by this
6325
+ # parameter If this parameter is omitted, the default value of `1` is
6326
+ # used.
6327
+ #
6328
+ # When additional capacity is required, Amazon ECS will scale up the
6329
+ # minimum scaling step size even if the actual demand is less than the
6330
+ # minimum scaling step size.
6331
+ #
6332
+ # If you use a capacity provider with an Auto Scaling group configured
6333
+ # with more than one Amazon EC2 instance type or Availability Zone,
6334
+ # Amazon ECS will scale up by the exact minimum scaling step size
6335
+ # value and will ignore both the maximum scaling step size as well as
6336
+ # the capacity demand.
6192
6337
  # @return [Integer]
6193
6338
  #
6194
6339
  # @!attribute [rw] maximum_scaling_step_size
6195
- # The maximum number of container instances that Amazon ECS will scale
6196
- # in or scale out at one time. If this parameter is omitted, the
6197
- # default value of `10000` is used.
6340
+ # The maximum number of Amazon EC2 instances that Amazon ECS will
6341
+ # scale out at one time. The scale in process is not affected by this
6342
+ # parameter. If this parameter is omitted, the default value of
6343
+ # `10000` is used.
6198
6344
  # @return [Integer]
6199
6345
  #
6200
6346
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/ManagedScaling AWS API Documentation
@@ -6538,9 +6684,6 @@ module Aws::ECS
6538
6684
  # more information, see `hostPort`. Port mappings that are
6539
6685
  # automatically assigned in this way do not count toward the 100
6540
6686
  # reserved ports limit of a container instance.
6541
- #
6542
- # You cannot expose the same container port for multiple protocols. An
6543
- # error will be returned if this is attempted.
6544
6687
  # @return [Integer]
6545
6688
  #
6546
6689
  # @!attribute [rw] host_port
@@ -7253,6 +7396,14 @@ module Aws::ECS
7253
7396
  # iam: "ENABLED", # accepts ENABLED, DISABLED
7254
7397
  # },
7255
7398
  # },
7399
+ # fsx_windows_file_server_volume_configuration: {
7400
+ # file_system_id: "String", # required
7401
+ # root_directory: "String", # required
7402
+ # authorization_config: { # required
7403
+ # credentials_parameter: "String", # required
7404
+ # domain: "String", # required
7405
+ # },
7406
+ # },
7256
7407
  # },
7257
7408
  # ],
7258
7409
  # placement_constraints: [
@@ -7390,8 +7541,10 @@ module Aws::ECS
7390
7541
  # @return [Array<Types::TaskDefinitionPlacementConstraint>]
7391
7542
  #
7392
7543
  # @!attribute [rw] requires_compatibilities
7393
- # The launch type required by the task. If no value is specified, it
7394
- # defaults to `EC2`.
7544
+ # The task launch type that Amazon ECS should validate the task
7545
+ # definition against. This ensures that the task definition parameters
7546
+ # are compatible with the specified launch type. If no value is
7547
+ # specified, it defaults to `EC2`.
7395
7548
  # @return [Array<String>]
7396
7549
  #
7397
7550
  # @!attribute [rw] cpu
@@ -9091,7 +9244,7 @@ module Aws::ECS
9091
9244
  #
9092
9245
  # [1]: https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate
9093
9246
  # [2]: https://docs.docker.com/engine/api/v1.35/
9094
- # [3]: https://docs.docker.com/engine/reference/run/
9247
+ # [3]: https://docs.docker.com/engine/reference/run/#security-configuration
9095
9248
  #
9096
9249
  # @note When making an API call, you may pass SystemControl
9097
9250
  # data as a hash:
@@ -9753,9 +9906,12 @@ module Aws::ECS
9753
9906
  # @!attribute [rw] memory
9754
9907
  # The amount (in MiB) of memory used by the task.
9755
9908
  #
9756
- # If using the EC2 launch type, this field is optional and any value
9757
- # can be used. If a task-level memory value is specified then the
9758
- # container-level memory value is optional.
9909
+ # If using the EC2 launch type, you must specify either a task-level
9910
+ # memory value or a container-level memory value. This field is
9911
+ # optional and any value can be used. If a task-level memory value is
9912
+ # specified then the container-level memory value is optional. For
9913
+ # more information regarding container-level memory and memory
9914
+ # reservation, see [ContainerDefinition][1].
9759
9915
  #
9760
9916
  # If using the Fargate launch type, this field is required and you
9761
9917
  # must use one of the following values, which determines your range of
@@ -9775,6 +9931,10 @@ module Aws::ECS
9775
9931
  #
9776
9932
  # * Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)
9777
9933
  # - Available `cpu` values: 4096 (4 vCPU)
9934
+ #
9935
+ #
9936
+ #
9937
+ # [1]: https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ContainerDefinition.html
9778
9938
  # @return [String]
9779
9939
  #
9780
9940
  # @!attribute [rw] inference_accelerators
@@ -10272,7 +10432,7 @@ module Aws::ECS
10272
10432
  # @return [String]
10273
10433
  #
10274
10434
  # @!attribute [rw] size
10275
- # The size (in MiB) of the tmpfs volume.
10435
+ # The maximum size (in MiB) of the tmpfs volume.
10276
10436
  # @return [Integer]
10277
10437
  #
10278
10438
  # @!attribute [rw] mount_options
@@ -10872,12 +11032,14 @@ module Aws::ECS
10872
11032
  include Aws::Structure
10873
11033
  end
10874
11034
 
10875
- # A data volume used in a task definition. For tasks that use Amazon
10876
- # Elastic File System (Amazon EFS) file storage, specify an
10877
- # `efsVolumeConfiguration`. For tasks that use a Docker volume, specify
10878
- # a `DockerVolumeConfiguration`. For tasks that use a bind mount host
10879
- # volume, specify a `host` and optional `sourcePath`. For more
10880
- # information, see [Using Data Volumes in Tasks][1].
11035
+ # A data volume used in a task definition. For tasks that use the Amazon
11036
+ # Elastic File System (Amazon EFS), specify an `efsVolumeConfiguration`.
11037
+ # For Windows tasks that use Amazon FSx for Windows File Server file
11038
+ # system, specify a `fsxWindowsFileServerVolumeConfiguration`. For tasks
11039
+ # that use a Docker volume, specify a `DockerVolumeConfiguration`. For
11040
+ # tasks that use a bind mount host volume, specify a `host` and optional
11041
+ # `sourcePath`. For more information, see [Using Data Volumes in
11042
+ # Tasks][1].
10881
11043
  #
10882
11044
  #
10883
11045
  #
@@ -10912,6 +11074,14 @@ module Aws::ECS
10912
11074
  # iam: "ENABLED", # accepts ENABLED, DISABLED
10913
11075
  # },
10914
11076
  # },
11077
+ # fsx_windows_file_server_volume_configuration: {
11078
+ # file_system_id: "String", # required
11079
+ # root_directory: "String", # required
11080
+ # authorization_config: { # required
11081
+ # credentials_parameter: "String", # required
11082
+ # domain: "String", # required
11083
+ # },
11084
+ # },
10915
11085
  # }
10916
11086
  #
10917
11087
  # @!attribute [rw] name
@@ -10948,13 +11118,19 @@ module Aws::ECS
10948
11118
  # File System file system for task storage.
10949
11119
  # @return [Types::EFSVolumeConfiguration]
10950
11120
  #
11121
+ # @!attribute [rw] fsx_windows_file_server_volume_configuration
11122
+ # This parameter is specified when you are using Amazon FSx for
11123
+ # Windows File Server file system for task storage.
11124
+ # @return [Types::FSxWindowsFileServerVolumeConfiguration]
11125
+ #
10951
11126
  # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/Volume AWS API Documentation
10952
11127
  #
10953
11128
  class Volume < Struct.new(
10954
11129
  :name,
10955
11130
  :host,
10956
11131
  :docker_volume_configuration,
10957
- :efs_volume_configuration)
11132
+ :efs_volume_configuration,
11133
+ :fsx_windows_file_server_volume_configuration)
10958
11134
  SENSITIVE = []
10959
11135
  include Aws::Structure
10960
11136
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-ecs
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.70.0
4
+ version: 1.71.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-09-30 00:00:00.000000000 Z
11
+ date: 2020-11-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core