Skip to content

Commit 8e51a81

Browse files
committed
chore: update comments
1 parent bd56080 commit 8e51a81

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

check-ecs-exec.sh

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,9 +21,11 @@ set -euo pipefail
2121
## https://aws.amazon.com/blogs/containers/new-using-amazon-ecs-exec-access-your-containers-fargate-ec2/
2222
##
2323

24-
## NOTE: This script needs the following permissions.
25-
## If you use an IAM user with an assumed role to run the script,
26-
## then you need allow the "iam:ListRoles" action in addition to the following.
24+
## NOTE: This script at least needs the following permissions.
25+
## 1. If you use an IAM user with an assumed role to run the script,
26+
## then you need allow the "iam:ListRoles" action in addition to the following.
27+
## 2. If you configured your ECS cluster to use KMS key for ECS Exec,
28+
## then you need allow the "kms:DescribeKey" action in addition to the following.
2729
## {
2830
## "Version": "2012-10-17",
2931
## "Statement": [
@@ -239,6 +241,7 @@ executeCommandConfigurationJson=$(echo "${describedClusterJson}" \
239241
printf "${COLOR_DEFAULT} Cluster Configuration |"
240242

241243
kmsKeyId="null"
244+
kmsKeyArn="null"
242245
logging="null"
243246
s3BucketName="null"
244247
s3KeyPrefix="null"

0 commit comments

Comments
 (0)