AWS Amazon ECS Service

aws_ecs_service (Terraform)

The Service in Amazon ECS can be configured in Terraform with the resource name aws_ecs_service. The following sections describe 4 examples of how to use the resource and its parameters.

Example Usage from GitHub

jorgechato/platform-tf

resource "aws_ecs_service" "nginx-service" {
  count               = 1
  name                = "nginx"
  cluster             = aws_ecs_cluster.platform.id
  task_definition     = aws_ecs_task_definition.nginx-task-definition.arn
  scheduling_strategy = "REPLICA"

maikelpenz/kafka-aws-deployment

resource "aws_ecs_service" "kad-kafka-schema-registry" {
  cluster                            = aws_ecs_cluster.kad-ecs.id
  desired_count                      = 1
  launch_type                        = "EC2"
  name                               = "kad-kafka-schema-registry"
  scheduling_strategy                = "REPLICA"

exNihlio/terraform

resource "aws_ecs_service" "es_usw2a" {
    name = "es_usw2a"
    cluster = aws_ecs_cluster.es_cluster.id
    task_definition = aws_ecs_task_definition.es_usw2a.arn
    desired_count = 1
    launch_type = "FARGATE"

gilyas/infracost

resource "aws_ecs_service" "ecs_fargate1" {
  name            = "ecs_fargate1"
  launch_type     = "FARGATE"
  cluster         = aws_ecs_cluster.ecs1.id
  task_definition = aws_ecs_task_definition.ecs_task1.arn
  desired_count   = 2

Parameters

• cluster optional computed - string
• deployment_maximum_percent optional - number
• deployment_minimum_healthy_percent optional - number
• desired_count optional - number
• enable_ecs_managed_tags optional - bool
• enable_execute_command optional - bool
• force_new_deployment optional - bool
• health_check_grace_period_seconds optional - number
• iam_role optional computed - string
• id optional computed - string
• launch_type optional computed - string
• name required - string
• platform_version optional computed - string
• propagate_tags optional - string
• scheduling_strategy optional - string
• tags optional - map from string to string
• task_definition optional - string
• wait_for_steady_state optional - bool
• capacity_provider_strategy set block
  • base optional - number
  • capacity_provider required - string
  • weight optional - number
• deployment_circuit_breaker list block
  • enable required - bool
  • rollback required - bool
• deployment_controller list block
  • type optional - string
• load_balancer set block
  • container_name required - string
  • container_port required - number
  • elb_name optional - string
  • target_group_arn optional - string
• network_configuration list block
  • assign_public_ip optional - bool
  • security_groups optional - set of string
  • subnets required - set of string
• ordered_placement_strategy list block
  • field optional - string
  • type required - string
• placement_constraints set block
  • expression optional - string
  • type required - string
• service_registries list block
  • container_name optional - string
  • container_port optional - number
  • port optional - number
  • registry_arn required - string
• timeouts single block
  • delete optional - string

Explanation in Terraform Registry

-> Note: To prevent a race condition during service deletion, make sure to set depends_on to the related aws_iam_role_policy; otherwise, the policy may be destroyed too soon and the ECS service will then get stuck in the DRAINING state. Provides an ECS service - effectively a task that is expected to run until an error occurs or a user terminates it (typically a webserver or a database). See ECS Services section in AWS developer guide.

Tips: Best Practices for The Other AWS Amazon ECS Resources

In addition to the aws_ecs_cluster, AWS Amazon ECS has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_ecs_cluster

Ensure to enable CloudWatch Container Insights

It's better to enable CloudWatch Container Insights to gain a better perspective on cluster applications. CloudWatch Container Insights collects, aggregates, and summarizes ECS metrics and logs.

aws_ecs_task_definition

Ensure to enable in-transit encryption of EFS volume

It is better to enable in-transit encryption of EFS volume for the protection of data in transit more.