AwsEcsTaskDefinitionContainerDefinitionsLinuxParametersCapabilitiesDetails
The Linux capabilities for the container that are added to or dropped from the default configuration provided by Docker.
Contents
- Add
-
The Linux capabilities for the container that are added to the default configuration provided by Docker. Valid values are as follows:
Valid values:
"ALL"
|"AUDIT_CONTROL"
|"AUDIT_WRITE"
|"BLOCK_SUSPEND"
|"CHOWN"
|"DAC_OVERRIDE"
|"DAC_READ_SEARCH"
|"FOWNER"
|"FSETID"
|"IPC_LOCK"
|"IPC_OWNER"
|"KILL"
|"LEASE"
|"LINUX_IMMUTABLE"
|"MAC_ADMIN"
|"MAC_OVERRIDE"
|"MKNOD"
|"NET_ADMIN"
|"NET_BIND_SERVICE"
|"NET_BROADCAST"
|"NET_RAW"
|"SETFCAP"
|"SETGID"
|"SETPCAP"
|"SETUID"
|"SYS_ADMIN"
|"SYS_BOOT"
|"SYS_CHROOT"
|"SYS_MODULE"
|"SYS_NICE"
|"SYS_PACCT"
|"SYS_PTRACE"
|"SYS_RAWIO"
|"SYS_RESOURCE"
|"SYS_TIME"
|"SYS_TTY_CONFIG"
|"SYSLOG"
|"WAKE_ALARM"
Type: Array of strings
Pattern:
.*\S.*
Required: No
- Drop
-
The Linux capabilities for the container that are dropped from the default configuration provided by Docker.
Valid values:
"ALL"
|"AUDIT_CONTROL"
|"AUDIT_WRITE"
|"BLOCK_SUSPEND"
|"CHOWN"
|"DAC_OVERRIDE"
|"DAC_READ_SEARCH"
|"FOWNER"
|"FSETID"
|"IPC_LOCK"
|"IPC_OWNER"
|"KILL"
|"LEASE"
|"LINUX_IMMUTABLE"
|"MAC_ADMIN"
|"MAC_OVERRIDE"
|"MKNOD"
|"NET_ADMIN"
|"NET_BIND_SERVICE"
|"NET_BROADCAST"
|"NET_RAW"
|"SETFCAP"
|"SETGID"
|"SETPCAP"
|"SETUID"
|"SYS_ADMIN"
|"SYS_BOOT"
|"SYS_CHROOT"
|"SYS_MODULE"
|"SYS_NICE"
|"SYS_PACCT"
|"SYS_PTRACE"
|"SYS_RAWIO"
|"SYS_RESOURCE"
|"SYS_TIME"
|"SYS_TTY_CONFIG"
|"SYSLOG"
|"WAKE_ALARM"
Type: Array of strings
Pattern:
.*\S.*
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: