From 2f81fb0aee588708275ba225a50f83a4c1aa359b Mon Sep 17 00:00:00 2001
From: yiyzhong <1281242498@qq.com>
Date: Tue, 8 Sep 2026 12:10:31 -0700
Subject: [PATCH] Fetch GPG keys from S3 instead of GitHub in ECS Anywhere
 install script

---
 scripts/ecs-anywhere-install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/ecs-anywhere-install.sh b/scripts/ecs-anywhere-install.sh
index f829b22f49a..1c38773368d 100755
--- a/scripts/ecs-anywhere-install.sh
+++ b/scripts/ecs-anywhere-install.sh
@@ -462,7 +462,7 @@ ssm-agent-signature-verify() {
         return
     fi
 
-    curl-helper "$dir/amazon-ssm-agent.gpg" "https://raw.githubusercontent.com/aws/amazon-ecs-agent/master/scripts/amazon-ssm-agent.gpg"
+    curl-helper "$dir/amazon-ssm-agent.gpg" "${S3_URL}/${S3_BUCKET}/amazon-ssm-agent.gpg"
     gpg --import "$dir/amazon-ssm-agent.gpg"
 
     if gpg --verify "$1" "$2"; then
@@ -646,7 +646,7 @@ ecs-init-signature-verify() {
         return
     fi
 
-    curl-helper "$dir/amazon-ecs-agent.gpg" "https://raw.githubusercontent.com/aws/amazon-ecs-agent/master/scripts/amazon-ecs-agent.gpg"
+    curl-helper "$dir/amazon-ecs-agent.gpg" "${S3_URL}/${S3_BUCKET}/amazon-ecs-agent.gpg"
     gpg --import "$dir/amazon-ecs-agent.gpg"
     if gpg --verify "$1" "$2"; then
         echo "amazon-ecs-init GPG verification passed. Install amazon-ecs-init."