🟢 Low  |  Source: AWS What’s New


Amazon ECS Managed Instances now supports AWS Trainium and Inferentia AI accelerator instance types, allowing teams to run ML training and inference workloads without managing the underlying EC2 infrastructure. A single task per instance is automatically allocated all accelerator resources via a NEURON_CORE configuration in the task definition. This is a feature release rather than a security event, though it expands the attack surface for ECS-based AI workloads.

Architect’s Take: Review IAM task roles and ECS task definitions for any new Trainium or Inferentia capacity providers to ensure least-privilege access; single-task-per-instance placement reduces noisy-neighbour risk but means a compromised container has full access to all Neuron cores, so container isolation and image provenance controls are critical.

Original advisory: Amazon ECS Managed Instances now supports AWS Trainium and AWS Inferentia