Class: Aws::ECS::Types::TrustedExecutionSummary

Inherits:

Struct

Object
Struct
Aws::ECS::Types::TrustedExecutionSummary

show all

Defined in:: gems/aws-sdk-ecs/lib/aws-sdk-ecs/types.rb

Overview

A summary of the trusted execution configuration for a task. This is a read-only view of the isolation configuration that was set on the task definition. Use it to see a task's isolation configuration in the response to DescribeTasks, RunTask, or StopTask without calling DescribeTaskDefinition. This summary never includes the attestation policy itself.

Trusted execution is supported only for Amazon ECS Managed Instances.

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#attestation_policy_status ⇒ String
The status of the attestation policy for the task.
#isolation_mode ⇒ String
The isolation mode that the task runs in.

Instance Attribute Details

#attestation_policy_status ⇒ `String`

The status of the attestation policy for the task. This value is present only for tasks that use the CONFIDENTIAL_SANDBOX isolation mode.

Returns:

(String)

# File 'gems/aws-sdk-ecs/lib/aws-sdk-ecs/types.rb', line 20487

class TrustedExecutionSummary < Struct.new(
  :isolation_mode,
  :attestation_policy_status)
  SENSITIVE = []
  include Aws::Structure
end

#isolation_mode ⇒ `String`

The isolation mode that the task runs in. This value mirrors the isolationMode that was set in the task definition's TrustedExecutionConfiguration.

SHARED: The task shares the underlying Amazon EC2 instance with other tasks. This is the default isolation mode.
ISOLATED_SANDBOX: The task runs in its own Nitro Sandbox, which is a lightweight virtual machine that is isolated by the Amazon Web Services Nitro System. Each task's sandbox is isolated from every other task's sandbox on the same Amazon EC2 instance, so one task can't access another task's memory or storage. For more information, see Isolated and confidential tasks in Amazon Elastic Container Service Developer Guide.
CONFIDENTIAL_SANDBOX: The task runs in its own Nitro Sandbox, which is a lightweight virtual machine that is isolated by the Amazon Web Services Nitro System, with cryptographic attestation. The host can't access the sandbox's memory or storage, and only the approved workload can decrypt data that you encrypt with your Key Management Service key. For more information, see Isolated and confidential tasks in Amazon Elastic Container Service Developer Guide.