aws-cdk.cx-api 2.174.1__tar.gz → 2.175.0__tar.gz

{aws_cdk_cx_api-2.174.1/src/aws_cdk.cx_api.egg-info → aws_cdk_cx_api-2.175.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk.cx-api
-Version: 2.174.1
+Version: 2.175.0
 Summary: Cloud executable protocol
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services
@@ -543,3 +543,45 @@ If the flag is set to false then a custom resource will be created when using `U
   }
 }
 ```
+
+* `@aws-cdk/aws-ecs:disableEcsImdsBlocking`
+
+When set to true, CDK synth will throw exception if canContainersAccessInstanceRole is false.
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. CDK cannot guarantee the correct execution of the feature in all platforms. Setting this feature flag
+to true will ensure CDK does not attempt to implement IMDS blocking. By <ins>**end of 2025**</ins>, CDK will remove the
+IMDS blocking feature. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true
+  }
+}
+```
+
+* `@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature`
+
+When set to true along with canContainersAccessInstanceRole=false in ECS cluster, new updated commands will be added to UserData to block container accessing IMDS. **Applicable to Linux only.**
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. Set this flag to true in order to use new and updated commands. Please note that this
+feature alone with this feature flag will be deprecated by <ins>end of 2025</ins> as CDK cannot
+guarantee the correct execution of the feature in all platforms. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  },
+}
+```

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0}/README.md

@@ -513,3 +513,45 @@ If the flag is set to false then a custom resource will be created when using `U
   }
 }
 ```
+
+* `@aws-cdk/aws-ecs:disableEcsImdsBlocking`
+
+When set to true, CDK synth will throw exception if canContainersAccessInstanceRole is false.
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. CDK cannot guarantee the correct execution of the feature in all platforms. Setting this feature flag
+to true will ensure CDK does not attempt to implement IMDS blocking. By <ins>**end of 2025**</ins>, CDK will remove the
+IMDS blocking feature. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true
+  }
+}
+```
+
+* `@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature`
+
+When set to true along with canContainersAccessInstanceRole=false in ECS cluster, new updated commands will be added to UserData to block container accessing IMDS. **Applicable to Linux only.**
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. Set this flag to true in order to use new and updated commands. Please note that this
+feature alone with this feature flag will be deprecated by <ins>end of 2025</ins> as CDK cannot
+guarantee the correct execution of the feature in all platforms. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  },
+}
+```

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0}/setup.py

@@ -5,7 +5,7 @@ kwargs = json.loads(
     """
 {
     "name": "aws-cdk.cx-api",
-    "version": "2.174.1",
+    "version": "2.175.0",
     "description": "Cloud executable protocol",
     "license": "Apache-2.0",
     "url": "https://github.com/aws/aws-cdk",
@@ -26,7 +26,7 @@ kwargs = json.loads(
     ],
     "package_data": {
         "aws_cdk.cx_api._jsii": [
-            "cx-api@2.174.1.jsii.tgz"
+            "cx-api@2.175.0.jsii.tgz"
         ],
         "aws_cdk.cx_api": [
             "py.typed"

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0}/src/aws_cdk/cx_api/__init__.py

@@ -514,6 +514,48 @@ If the flag is set to false then a custom resource will be created when using `U
   }
 }
 ```
+
+* `@aws-cdk/aws-ecs:disableEcsImdsBlocking`
+
+When set to true, CDK synth will throw exception if canContainersAccessInstanceRole is false.
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. CDK cannot guarantee the correct execution of the feature in all platforms. Setting this feature flag
+to true will ensure CDK does not attempt to implement IMDS blocking. By <ins>**end of 2025**</ins>, CDK will remove the
+IMDS blocking feature. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true
+  }
+}
+```
+
+* `@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature`
+
+When set to true along with canContainersAccessInstanceRole=false in ECS cluster, new updated commands will be added to UserData to block container accessing IMDS. **Applicable to Linux only.**
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. Set this flag to true in order to use new and updated commands. Please note that this
+feature alone with this feature flag will be deprecated by <ins>end of 2025</ins> as CDK cannot
+guarantee the correct execution of the feature in all platforms. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  },
+}
+```
 '''
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0}/src/aws_cdk/cx_api/_jsii/__init__.py

@@ -31,7 +31,7 @@ def check_type(argname: str, value: object, expected_type: typing.Any) -> typing
 import aws_cdk.cloud_assembly_schema._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
-    "@aws-cdk/cx-api", "2.174.1", __name__[0:-6], "cx-api@2.174.1.jsii.tgz"
+    "@aws-cdk/cx-api", "2.175.0", __name__[0:-6], "cx-api@2.175.0.jsii.tgz"
 )
 
 __all__ = [

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0/src/aws_cdk.cx_api.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: aws-cdk.cx-api
-Version: 2.174.1
+Version: 2.175.0
 Summary: Cloud executable protocol
 Home-page: https://github.com/aws/aws-cdk
 Author: Amazon Web Services
@@ -543,3 +543,45 @@ If the flag is set to false then a custom resource will be created when using `U
   }
 }
 ```
+
+* `@aws-cdk/aws-ecs:disableEcsImdsBlocking`
+
+When set to true, CDK synth will throw exception if canContainersAccessInstanceRole is false.
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. CDK cannot guarantee the correct execution of the feature in all platforms. Setting this feature flag
+to true will ensure CDK does not attempt to implement IMDS blocking. By <ins>**end of 2025**</ins>, CDK will remove the
+IMDS blocking feature. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true
+  }
+}
+```
+
+* `@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature`
+
+When set to true along with canContainersAccessInstanceRole=false in ECS cluster, new updated commands will be added to UserData to block container accessing IMDS. **Applicable to Linux only.**
+
+In an ECS Cluster with `MachineImageType.AMAZON_LINUX_2`, the canContainersAccessInstanceRole=false option attempts to add commands to block containers from
+accessing IMDS. Set this flag to true in order to use new and updated commands. Please note that this
+feature alone with this feature flag will be deprecated by <ins>end of 2025</ins> as CDK cannot
+guarantee the correct execution of the feature in all platforms. See [Github discussion](https://github.com/aws/aws-cdk/discussions/32609) for more information.
+
+**It is recommended to follow ECS documentation to block IMDS for your specific platform and cluster configuration.**
+
+*cdk.json*
+
+```json
+{
+  "context": {
+    "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  },
+}
+```

{aws_cdk_cx_api-2.174.1 → aws_cdk_cx_api-2.175.0}/src/aws_cdk.cx_api.egg-info/SOURCES.txt

@@ -12,4 +12,4 @@ src/aws_cdk.cx_api.egg-info/top_level.txt
 src/aws_cdk/cx_api/__init__.py
 src/aws_cdk/cx_api/py.typed
 src/aws_cdk/cx_api/_jsii/__init__.py
-src/aws_cdk/cx_api/_jsii/cx-api@2.174.1.jsii.tgz
+src/aws_cdk/cx_api/_jsii/cx-api@2.175.0.jsii.tgz