AWS::GameLift::ContainerGroupDefinition LinuxCapabilities - AWS CloudFormation
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::GameLift::ContainerGroupDefinition LinuxCapabilities

A set of Linux capabilities that are added to a container's default Docker configuration for a container defined in the ContainerGroupDefinition. For more detailed information about these Linux capabilities, see the capabilities(7) Linux manual page.

Modifying capabilities on an existing container: To remove a capability, update the Include list with only the needed capabilities. To revert back to default capabilities, omit LinuxCapabilities within the ContainerDefinition.

Part of: GameServerContainerDefinition, GameServerContainerDefinitionInput, SupportContainerDefinition, SupportContainerDefinitionInput

Returned by: CreateContainerGroupDefinition, DescribeContainerGroupDefinition, ListContainerGroupDefinitions, ListContainerGroupDefinitionVersions, UpdateContainerGroupDefinition

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "Include" : [ String, ... ] }

YAML

Include: - String

Properties

Include

The list of Linux capabilities to add to the container's default configuration. Specify each capability as a string from the set of supported capability names (for example, NET_BIND_SERVICE or SYS_PTRACE).

Required: No

Type: Array of String

Allowed values: AUDIT_CONTROL | AUDIT_WRITE | BLOCK_SUSPEND | CHOWN | DAC_OVERRIDE | DAC_READ_SEARCH | FOWNER | FSETID | IPC_LOCK | IPC_OWNER | KILL | LEASE | LINUX_IMMUTABLE | MAC_ADMIN | MAC_OVERRIDE | MKNOD | NET_ADMIN | NET_BIND_SERVICE | NET_BROADCAST | NET_RAW | SETFCAP | SETGID | SETPCAP | SETUID | SYS_ADMIN | SYS_BOOT | SYS_CHROOT | SYS_MODULE | SYS_NICE | SYS_PACCT | SYS_PTRACE | SYS_RAWIO | SYS_RESOURCE | SYS_TIME | SYS_TTY_CONFIG | SYSLOG | WAKE_ALARM

Minimum: 0

Maximum: 37

Update requires: No interruption