Skip to content

Commit

Permalink
feat(client-ecs): This release adds support for enabling FIPS complia…
Browse files Browse the repository at this point in the history 
…nce on Amazon ECS Fargate tasks
  • Loading branch information
awstools committed Apr 10, 2023
1 parent 449823d commit db95943
Show file tree
Hide file tree
Showing 9 changed files with 166 additions and 151 deletions.
22 changes: 11 additions & 11 deletions clients/client-ecs/src/ECS.ts
View file
Expand Up @@ -1177,7 +1177,7 @@ export class ECS extends ECSClient {
* statement, for example limit the actions to a specific cluster, you receive an
* <code>AccessDeniedException</code> when there is a mismatch between the condition
* key value and the corresponding parameter value.</p>
* <p>For information about required permissions and considerations, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.htm">Using Amazon ECS Exec for
* <p>For information about required permissions and considerations, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html">Using Amazon ECS Exec for
* debugging</a> in the <i>Amazon ECS Developer Guide</i>. </p>
*/
public executeCommand(
Expand Down Expand Up @@ -1588,9 +1588,9 @@ export class ECS extends ECSClient {
/**
* @public
* <p>Modifies an account setting. Account settings are set on a per-Region basis.</p>
* <p>If you change the account setting for the root user, the default settings for all of
* the users and roles that no individual account setting was specified are reset for.
* For more information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html">Account
* <p>If you change the root user account setting, the default settings are reset for users
* and roles that do not have specified individual account settings. For more information,
* see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html">Account
* Settings</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
* <p>When <code>serviceLongArnFormat</code>, <code>taskLongArnFormat</code>, or
* <code>containerInstanceLongArnFormat</code> are specified, the Amazon Resource Name
Expand All @@ -1601,15 +1601,15 @@ export class ECS extends ECSClient {
* must turn on this setting to use Amazon ECS features such as resource tagging.</p>
* <p>When <code>awsvpcTrunking</code> is specified, the elastic network interface (ENI)
* limit for any new container instances that support the feature is changed. If
* <code>awsvpcTrunking</code> is enabled, any new container instances that support the
* <code>awsvpcTrunking</code> is turned on, any new container instances that support the
* feature are launched have the increased ENI limits available to them. For more
* information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-eni.html">Elastic Network
* Interface Trunking</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
* <p>When <code>containerInsights</code> is specified, the default setting indicating
* whether CloudWatch Container Insights is enabled for your clusters is changed. If
* <code>containerInsights</code> is enabled, any new clusters that are created will
* have Container Insights enabled unless you disable it during cluster creation. For more
* information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html">CloudWatch
* <p>When <code>containerInsights</code> is specified, the default setting indicating whether
* Amazon Web Services CloudWatch Container Insights is turned on for your clusters is changed. If
* <code>containerInsights</code> is turned on, any new clusters that are created will
* have Container Insights turned on unless you disable it during cluster creation. For
* more information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html">CloudWatch
* Container Insights</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
*/
public putAccountSetting(
Expand Down Expand Up @@ -2574,7 +2574,7 @@ export class ECS extends ECSClient {
* <code>true</code> to protect your task from termination during scale-in events from
* <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-auto-scaling.html">Service
* Autoscaling</a> or <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html">deployments</a>.</p>
* <p>Task-protection, by default, expires after 2 hours at which point Amazon ECS unsets the
* <p>Task-protection, by default, expires after 2 hours at which point Amazon ECS clears the
* <code>protectionEnabled</code> property making the task eligible for termination by
* a subsequent scale-in event.</p>
* <p>You can specify a custom expiration period for task protection from 1 minute to up to
Expand Down
2 changes: 1 addition & 1 deletion clients/client-ecs/src/commands/DeleteAccountSettingCommand.ts
View file
Expand Up @@ -41,7 +41,7 @@ export interface DeleteAccountSettingCommandOutput extends DeleteAccountSettingR
* // const { ECSClient, DeleteAccountSettingCommand } = require("@aws-sdk/client-ecs"); // CommonJS import
* const client = new ECSClient(config);
* const input = { // DeleteAccountSettingRequest
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights", // required
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights" || "fargateFIPSMode", // required
* principalArn: "STRING_VALUE",
* };
* const command = new DeleteAccountSettingCommand(input);
Expand Down
6 changes: 3 additions & 3 deletions clients/client-ecs/src/commands/ExecuteCommandCommand.ts
View file
Expand Up @@ -41,7 +41,7 @@ export interface ExecuteCommandCommandOutput extends ExecuteCommandResponse, __M
* statement, for example limit the actions to a specific cluster, you receive an
* <code>AccessDeniedException</code> when there is a mismatch between the condition
* key value and the corresponding parameter value.</p>
* <p>For information about required permissions and considerations, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.htm">Using Amazon ECS Exec for
* <p>For information about required permissions and considerations, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html">Using Amazon ECS Exec for
* debugging</a> in the <i>Amazon ECS Developer Guide</i>. </p>
* @example
* Use a bare-bones client and the command you need to make an API call.
Expand Down Expand Up @@ -95,8 +95,8 @@ export interface ExecuteCommandCommandOutput extends ExecuteCommandResponse, __M
* <p>The SSM agent is not installed or is not running</p>
* </li>
* <li>
* <p> There is an interface Amazon VPC endpoint for Amazon ECS, but there is not one for
* for Systems Manager Session Manager</p>
* <p> There is an interface Amazon VPC endpoint for Amazon ECS, but there is not one for Systems
* Manager Session Manager</p>
* </li>
* </ul>
* <p>For information about how to troubleshoot the issues, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html">Troubleshooting issues with ECS
Expand Down
2 changes: 1 addition & 1 deletion clients/client-ecs/src/commands/ListAccountSettingsCommand.ts
View file
Expand Up @@ -40,7 +40,7 @@ export interface ListAccountSettingsCommandOutput extends ListAccountSettingsRes
* // const { ECSClient, ListAccountSettingsCommand } = require("@aws-sdk/client-ecs"); // CommonJS import
* const client = new ECSClient(config);
* const input = { // ListAccountSettingsRequest
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights",
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights" || "fargateFIPSMode",
* value: "STRING_VALUE",
* principalArn: "STRING_VALUE",
* effectiveSettings: true || false,
Expand Down
20 changes: 10 additions & 10 deletions clients/client-ecs/src/commands/PutAccountSettingCommand.ts
View file
Expand Up @@ -33,9 +33,9 @@ export interface PutAccountSettingCommandOutput extends PutAccountSettingRespons
/**
* @public
* <p>Modifies an account setting. Account settings are set on a per-Region basis.</p>
* <p>If you change the account setting for the root user, the default settings for all of
* the users and roles that no individual account setting was specified are reset for.
* For more information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html">Account
* <p>If you change the root user account setting, the default settings are reset for users
* and roles that do not have specified individual account settings. For more information,
* see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html">Account
* Settings</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
* <p>When <code>serviceLongArnFormat</code>, <code>taskLongArnFormat</code>, or
* <code>containerInstanceLongArnFormat</code> are specified, the Amazon Resource Name
Expand All @@ -46,15 +46,15 @@ export interface PutAccountSettingCommandOutput extends PutAccountSettingRespons
* must turn on this setting to use Amazon ECS features such as resource tagging.</p>
* <p>When <code>awsvpcTrunking</code> is specified, the elastic network interface (ENI)
* limit for any new container instances that support the feature is changed. If
* <code>awsvpcTrunking</code> is enabled, any new container instances that support the
* <code>awsvpcTrunking</code> is turned on, any new container instances that support the
* feature are launched have the increased ENI limits available to them. For more
* information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-eni.html">Elastic Network
* Interface Trunking</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
* <p>When <code>containerInsights</code> is specified, the default setting indicating
* whether CloudWatch Container Insights is enabled for your clusters is changed. If
* <code>containerInsights</code> is enabled, any new clusters that are created will
* have Container Insights enabled unless you disable it during cluster creation. For more
* information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html">CloudWatch
* <p>When <code>containerInsights</code> is specified, the default setting indicating whether
* Amazon Web Services CloudWatch Container Insights is turned on for your clusters is changed. If
* <code>containerInsights</code> is turned on, any new clusters that are created will
* have Container Insights turned on unless you disable it during cluster creation. For
* more information, see <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html">CloudWatch
* Container Insights</a> in the <i>Amazon Elastic Container Service Developer Guide</i>.</p>
* @example
* Use a bare-bones client and the command you need to make an API call.
Expand All @@ -63,7 +63,7 @@ export interface PutAccountSettingCommandOutput extends PutAccountSettingRespons
* // const { ECSClient, PutAccountSettingCommand } = require("@aws-sdk/client-ecs"); // CommonJS import
* const client = new ECSClient(config);
* const input = { // PutAccountSettingRequest
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights", // required
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights" || "fargateFIPSMode", // required
* value: "STRING_VALUE", // required
* principalArn: "STRING_VALUE",
* };
Expand Down
2 changes: 1 addition & 1 deletion clients/client-ecs/src/commands/PutAccountSettingDefaultCommand.ts
View file
Expand Up @@ -42,7 +42,7 @@ export interface PutAccountSettingDefaultCommandOutput extends PutAccountSetting
* // const { ECSClient, PutAccountSettingDefaultCommand } = require("@aws-sdk/client-ecs"); // CommonJS import
* const client = new ECSClient(config);
* const input = { // PutAccountSettingDefaultRequest
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights", // required
* name: "serviceLongArnFormat" || "taskLongArnFormat" || "containerInstanceLongArnFormat" || "awsvpcTrunking" || "containerInsights" || "fargateFIPSMode", // required
* value: "STRING_VALUE", // required
* };
* const command = new PutAccountSettingDefaultCommand(input);
Expand Down
2 changes: 1 addition & 1 deletion clients/client-ecs/src/commands/UpdateTaskProtectionCommand.ts
View file
Expand Up @@ -36,7 +36,7 @@ export interface UpdateTaskProtectionCommandOutput extends UpdateTaskProtectionR
* <code>true</code> to protect your task from termination during scale-in events from
* <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-auto-scaling.html">Service
* Autoscaling</a> or <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html">deployments</a>.</p>
* <p>Task-protection, by default, expires after 2 hours at which point Amazon ECS unsets the
* <p>Task-protection, by default, expires after 2 hours at which point Amazon ECS clears the
* <code>protectionEnabled</code> property making the task eligible for termination by
* a subsequent scale-in event.</p>
* <p>You can specify a custom expiration period for task protection from 1 minute to up to
Expand Down

0 comments on commit db95943

Please sign in to comment.