| Interface | Description |
|---|---|
| AddAutoScalingGroupCapacityOptions |
(experimental) The properties for adding an AutoScalingGroup.
|
| AddCapacityOptions |
(experimental) The properties for adding instance capacity to an AutoScalingGroup.
|
| AppMeshProxyConfigurationConfigProps |
(experimental) The configuration to use when setting an App Mesh proxy configuration.
|
| AppMeshProxyConfigurationProps |
(experimental) Interface for setting the properties of proxy configuration.
|
| AsgCapacityProviderProps |
(experimental) The options for creating an Auto Scaling Group Capacity Provider.
|
| AssetImageProps |
(experimental) The properties for building an AssetImage.
|
| AssociateCloudMapServiceOptions |
(experimental) The options for using a cloudmap service.
|
| AuthorizationConfig |
(experimental) The authorization configuration details for the Amazon EFS file system.
|
| AwsLogDriverProps |
(experimental) Specifies the awslogs log driver configuration options.
|
| BaseLogDriverProps | |
| BaseServiceOptions |
(experimental) The properties for the base Ec2Service or FargateService service.
|
| BaseServiceProps |
(experimental) Complete base service properties that are required to be supplied by the implementation of the BaseService class.
|
| BottleRocketImageProps |
(experimental) Properties for BottleRocketImage.
|
| CapacityProviderStrategy |
(experimental) A Capacity Provider strategy to use for the service.
|
| CfnCapacityProvider.AutoScalingGroupProviderProperty | |
| CfnCapacityProvider.ManagedScalingProperty | |
| CfnCapacityProviderProps |
Properties for defining a `AWS::ECS::CapacityProvider`.
|
| CfnCluster.CapacityProviderStrategyItemProperty | |
| CfnCluster.ClusterConfigurationProperty | |
| CfnCluster.ClusterSettingsProperty | |
| CfnCluster.ExecuteCommandConfigurationProperty | |
| CfnCluster.ExecuteCommandLogConfigurationProperty | |
| CfnClusterCapacityProviderAssociations.CapacityProviderStrategyProperty | |
| CfnClusterCapacityProviderAssociationsProps |
Properties for defining a `AWS::ECS::ClusterCapacityProviderAssociations`.
|
| CfnClusterProps |
Properties for defining a `AWS::ECS::Cluster`.
|
| CfnPrimaryTaskSetProps |
Properties for defining a `AWS::ECS::PrimaryTaskSet`.
|
| CfnService.AwsVpcConfigurationProperty | |
| CfnService.CapacityProviderStrategyItemProperty | |
| CfnService.DeploymentCircuitBreakerProperty | |
| CfnService.DeploymentConfigurationProperty | |
| CfnService.DeploymentControllerProperty | |
| CfnService.LoadBalancerProperty | |
| CfnService.NetworkConfigurationProperty | |
| CfnService.PlacementConstraintProperty | |
| CfnService.PlacementStrategyProperty | |
| CfnService.ServiceRegistryProperty | |
| CfnServiceProps |
Properties for defining a `AWS::ECS::Service`.
|
| CfnTaskDefinition.AuthorizationConfigProperty | |
| CfnTaskDefinition.ContainerDefinitionProperty | |
| CfnTaskDefinition.ContainerDependencyProperty | |
| CfnTaskDefinition.DeviceProperty | |
| CfnTaskDefinition.DockerVolumeConfigurationProperty | |
| CfnTaskDefinition.EfsVolumeConfigurationProperty | |
| CfnTaskDefinition.EnvironmentFileProperty | |
| CfnTaskDefinition.EphemeralStorageProperty | |
| CfnTaskDefinition.FirelensConfigurationProperty | |
| CfnTaskDefinition.HealthCheckProperty | |
| CfnTaskDefinition.HostEntryProperty | |
| CfnTaskDefinition.HostVolumePropertiesProperty | |
| CfnTaskDefinition.InferenceAcceleratorProperty | |
| CfnTaskDefinition.KernelCapabilitiesProperty | |
| CfnTaskDefinition.KeyValuePairProperty | |
| CfnTaskDefinition.LinuxParametersProperty | |
| CfnTaskDefinition.LogConfigurationProperty | |
| CfnTaskDefinition.MountPointProperty | |
| CfnTaskDefinition.PortMappingProperty | |
| CfnTaskDefinition.ProxyConfigurationProperty | |
| CfnTaskDefinition.RepositoryCredentialsProperty | |
| CfnTaskDefinition.ResourceRequirementProperty | |
| CfnTaskDefinition.SecretProperty | |
| CfnTaskDefinition.SystemControlProperty | |
| CfnTaskDefinition.TaskDefinitionPlacementConstraintProperty | |
| CfnTaskDefinition.TmpfsProperty | |
| CfnTaskDefinition.UlimitProperty | |
| CfnTaskDefinition.VolumeFromProperty | |
| CfnTaskDefinition.VolumeProperty | |
| CfnTaskDefinitionProps |
Properties for defining a `AWS::ECS::TaskDefinition`.
|
| CfnTaskSet.AwsVpcConfigurationProperty | |
| CfnTaskSet.LoadBalancerProperty | |
| CfnTaskSet.NetworkConfigurationProperty | |
| CfnTaskSet.ScaleProperty | |
| CfnTaskSet.ServiceRegistryProperty | |
| CfnTaskSetProps |
Properties for defining a `AWS::ECS::TaskSet`.
|
| CloudMapNamespaceOptions |
(experimental) The options for creating an AWS Cloud Map namespace.
|
| CloudMapOptions |
(experimental) The options to enabling AWS Cloud Map for an Amazon ECS service.
|
| ClusterAttributes |
(experimental) The properties to import from the ECS cluster.
|
| ClusterProps |
(experimental) The properties used to define an ECS cluster.
|
| CommonTaskDefinitionAttributes |
(experimental) The common task definition attributes used across all types of task definitions.
|
| CommonTaskDefinitionProps |
(experimental) The common properties for all task definitions.
|
| ContainerDefinitionOptions | |
| ContainerDefinitionProps |
(experimental) The properties in a container definition.
|
| ContainerDependency |
(experimental) The details of a dependency on another container in the task definition.
|
| ContainerImageConfig |
(experimental) The configuration for creating a container image.
|
| CpuUtilizationScalingProps |
(experimental) The properties for enabling scaling based on CPU utilization.
|
| DeploymentCircuitBreaker |
(experimental) The deployment circuit breaker to use for the service.
|
| DeploymentController |
(experimental) The deployment controller to use for the service.
|
| Device |
(experimental) A container instance host device.
|
| DockerVolumeConfiguration |
(experimental) The configuration for a Docker volume.
|
| Ec2ServiceAttributes |
(experimental) The properties to import from the service using the EC2 launch type.
|
| Ec2ServiceProps |
(experimental) The properties for defining a service using the EC2 launch type.
|
| Ec2TaskDefinitionAttributes |
(experimental) Attributes used to import an existing EC2 task definition.
|
| Ec2TaskDefinitionProps |
(experimental) The properties for a task definition run on an EC2 cluster.
|
| EcsTarget | |
| EfsVolumeConfiguration |
(experimental) The configuration for an Elastic FileSystem volume.
|
| EnvironmentFileConfig |
(experimental) Configuration for the environment file.
|
| FargateServiceAttributes |
(experimental) The properties to import from the service using the Fargate launch type.
|
| FargateServiceProps |
(experimental) The properties for defining a service using the Fargate launch type.
|
| FargateTaskDefinitionAttributes |
(experimental) Attributes used to import an existing Fargate task definition.
|
| FargateTaskDefinitionProps |
(experimental) The properties for a task definition.
|
| FirelensConfig |
(experimental) Firelens Configuration https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html#firelens-taskdef.
|
| FireLensLogDriverProps |
(experimental) Specifies the firelens log driver configuration options.
|
| FirelensLogRouterDefinitionOptions |
(experimental) The options for creating a firelens log router.
|
| FirelensLogRouterProps |
(experimental) The properties in a firelens log router.
|
| FirelensOptions |
(experimental) The options for firelens log router https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html#firelens-taskdef-customconfig.
|
| FluentdLogDriverProps |
(experimental) Specifies the fluentd log driver configuration options.
|
| GelfLogDriverProps |
(experimental) Specifies the journald log driver configuration options.
|
| HealthCheck |
(experimental) The health check command and associated configuration parameters for the container.
|
| Host |
(experimental) The details on a container instance bind mount host volume.
|
| IBaseService |
(experimental) The interface for BaseService.
|
| IBaseService.Jsii$Default |
Internal default implementation for
IBaseService. |
| ICluster |
(experimental) A regional grouping of one or more container instances on which you can run tasks and services.
|
| ICluster.Jsii$Default |
Internal default implementation for
ICluster. |
| IEc2Service |
(experimental) The interface for a service using the EC2 launch type on an ECS cluster.
|
| IEc2Service.Jsii$Default |
Internal default implementation for
IEc2Service. |
| IEc2TaskDefinition |
(experimental) The interface of a task definition run on an EC2 cluster.
|
| IEc2TaskDefinition.Jsii$Default |
Internal default implementation for
IEc2TaskDefinition. |
| IEcsLoadBalancerTarget |
(experimental) Interface for ECS load balancer target.
|
| IEcsLoadBalancerTarget.Jsii$Default |
Internal default implementation for
IEcsLoadBalancerTarget. |
| IFargateService |
(experimental) The interface for a service using the Fargate launch type on an ECS cluster.
|
| IFargateService.Jsii$Default |
Internal default implementation for
IFargateService. |
| IFargateTaskDefinition |
(experimental) The interface of a task definition run on a Fargate cluster.
|
| IFargateTaskDefinition.Jsii$Default |
Internal default implementation for
IFargateTaskDefinition. |
| InferenceAccelerator |
(experimental) Elastic Inference Accelerator.
|
| IService |
(experimental) The interface for a service.
|
| IService.Jsii$Default |
Internal default implementation for
IService. |
| ITaskDefinition |
(experimental) The interface for all task definitions.
|
| ITaskDefinition.Jsii$Default |
Internal default implementation for
ITaskDefinition. |
| ITaskDefinitionExtension |
(experimental) An extension for Task Definitions.
|
| ITaskDefinitionExtension.Jsii$Default |
Internal default implementation for
ITaskDefinitionExtension. |
| JournaldLogDriverProps |
(experimental) Specifies the journald log driver configuration options.
|
| JsonFileLogDriverProps |
(experimental) Specifies the json-file log driver configuration options.
|
| LinuxParametersProps |
(experimental) The properties for defining Linux-specific options that are applied to the container.
|
| LoadBalancerTargetOptions |
(experimental) Properties for defining an ECS target.
|
| LogDriverConfig |
(experimental) The configuration to use when creating a log driver.
|
| MemoryUtilizationScalingProps |
(experimental) The properties for enabling scaling based on memory utilization.
|
| MountPoint |
(experimental) The details of data volume mount points for a container.
|
| PortMapping |
(experimental) Port mappings allow containers to access ports on the host container instance to send or receive traffic.
|
| RepositoryImageProps |
(experimental) The properties for an image hosted in a public or private repository.
|
| RequestCountScalingProps |
(experimental) The properties for enabling scaling based on Application Load Balancer (ALB) request counts.
|
| ScalableTaskCountProps |
(experimental) The properties of a scalable attribute representing task count.
|
| ScratchSpace |
(experimental) The temporary disk space mounted to the container.
|
| SplunkLogDriverProps |
(experimental) Specifies the splunk log driver configuration options.
|
| SyslogLogDriverProps |
(experimental) Specifies the syslog log driver configuration options.
|
| TaskDefinitionAttributes |
(experimental) A reference to an existing task definition.
|
| TaskDefinitionProps |
(experimental) The properties for task definitions.
|
| Tmpfs |
(experimental) The details of a tmpfs mount for a container.
|
| TrackCustomMetricProps |
(experimental) The properties for enabling target tracking scaling based on a custom CloudWatch metric.
|
| Ulimit |
(experimental) The ulimit settings to pass to the container.
|
| Volume |
(experimental) A data volume used in a task definition.
|
| VolumeFrom |
(experimental) The details on a data volume from another container in the same task definition.
|
| Enum | Description |
|---|---|
| AmiHardwareType |
(experimental) The ECS-optimized AMI variant to use.
|
| AwsLogDriverMode |
(experimental) awslogs provides two modes for delivering messages from the container to the log driver.
|
| BinPackResource |
(experimental) Instance resource used for bin packing.
|
| BottlerocketEcsVariant |
(experimental) Amazon ECS variant.
|
| Capability |
(experimental) A Linux capability.
|
| Compatibility |
(experimental) The task launch type compatibility requirement.
|
| ContainerDependencyCondition | |
| DeploymentControllerType |
(experimental) The deployment controller type to use for the service.
|
| DevicePermission |
(experimental) Permissions for device access.
|
| EnvironmentFileType |
(experimental) Type of environment file to be included in the container definition.
|
| FargatePlatformVersion |
(experimental) The platform version on which to run your service.
|
| FirelensConfigFileType |
(experimental) Firelens configuration file type, s3 or file path.
|
| FirelensLogRouterType |
(experimental) Firelens log router type, fluentbit or fluentd.
|
| GelfCompressionType |
(experimental) The type of compression the GELF driver uses to compress each log message.
|
| IpcMode |
(experimental) The IPC resource namespace to use for the containers in the task.
|
| LaunchType |
(experimental) The launch type of an ECS service.
|
| MachineImageType |
(experimental) The machine image type.
|
| NetworkMode |
(experimental) The networking mode to use for the containers in the task.
|
| PidMode |
(experimental) The process namespace to use for the containers in the task.
|
| PropagatedTagSource |
(experimental) Propagate tags from either service or task definition.
|
| Protocol |
(experimental) Network protocol.
|
| Scope |
(experimental) The scope for the Docker volume that determines its lifecycle.
|
| SplunkLogFormat |
(experimental) Log Message Format.
|
| TmpfsMountOption |
(experimental) The supported options for a tmpfs mount for a container.
|
| UlimitName |
(experimental) Type of resource to set a limit on.
|
| WindowsOptimizedVersion |
(experimental) ECS-optimized Windows version list.
|
---
This package contains constructs for working with Amazon Elastic Container Service (Amazon ECS).
Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service.
For further information on Amazon ECS, see the Amazon ECS documentation
The following example creates an Amazon ECS cluster, adds capacity to it, and runs a service on it:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
import software.amazon.awscdk.aws_ecs;
// Create an ECS cluster
Cluster cluster = new Cluster(this, "Cluster", new ClusterProps()
.vpc(vpc));
// Add capacity to it
cluster.addCapacity("DefaultAutoScalingGroupCapacity", new AddCapacityOptions()
.instanceType(new InstanceType("t2.xlarge"))
.desiredCapacity(3));
Ec2TaskDefinition taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("DefaultContainer", new ContainerDefinitionOptions()
.image(ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample"))
.memoryLimitMiB(512));
// Instantiate an Amazon ECS Service
Ec2Service ecsService = new Ec2Service(this, "Service", new Ec2ServiceProps()
.cluster(cluster)
.taskDefinition(taskDefinition));
For a set of constructs defining common ECS architectural patterns, see the @aws-cdk/aws-ecs-patterns package.
There are two sets of constructs in this library; one to run tasks on Amazon EC2 and one to run tasks on AWS Fargate.
Ec2TaskDefinition and Ec2Service constructs to run tasks on Amazon EC2 instances running in your account.FargateTaskDefinition and FargateService constructs to run tasks on
instances that are managed for you by AWS.Here are the main differences:
For more information on Amazon EC2 vs AWS Fargate and networking see the AWS Documentation: AWS Fargate and Task Networking.
A Cluster defines the infrastructure to run your
tasks on. You can run many tasks on a single cluster.
The following code creates a cluster that can run AWS Fargate tasks:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object cluster = Cluster.Builder.create(this, "Cluster")
.vpc(vpc)
.build();
To use tasks with Amazon EC2 launch-type, you have to add capacity to the cluster in order for tasks to be scheduled on your instances. Typically, you add an AutoScalingGroup with instances running the latest Amazon ECS-optimized AMI to the cluster. There is a method to build and add such an AutoScalingGroup automatically, or you can supply a customized AutoScalingGroup that you construct yourself. It's possible to add multiple AutoScalingGroups with various instance types.
The following example creates an Amazon ECS cluster and adds capacity to it:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object cluster = Cluster.Builder.create(this, "Cluster")
.vpc(vpc)
.build();
// Either add default capacity
cluster.addCapacity("DefaultAutoScalingGroupCapacity", Map.of(
"instanceType", new InstanceType("t2.xlarge"),
"desiredCapacity", 3));
// Or add customized capacity. Be sure to start the Amazon ECS-optimized AMI.
Object autoScalingGroup = AutoScalingGroup.Builder.create(this, "ASG")
.vpc(vpc)
.instanceType(new InstanceType("t2.xlarge"))
.machineImage(EcsOptimizedImage.amazonLinux())
// Or use Amazon ECS-Optimized Amazon Linux 2 AMI
// machineImage: EcsOptimizedImage.amazonLinux2(),
.desiredCapacity(3)
.build();
cluster.addAutoScalingGroup(autoScalingGroup);
If you omit the property vpc, the construct will create a new VPC with two AZs.
Bottlerocket is a Linux-based open source operating system that is purpose-built by AWS for running containers. You can launch Amazon ECS container instances with the Bottlerocket AMI.
NOTICE: The Bottlerocket AMI is in developer preview release for Amazon ECS and is subject to change.
The following example will create a capacity with self-managed Amazon EC2 capacity of 2 c5.large Linux instances running with Bottlerocket AMI.
Note that you must specify either a machineImage or machineImageType, at least one, not both.
The following example adds Bottlerocket capacity to the cluster:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
cluster.addCapacity("bottlerocket-asg", Map.of(
"minCapacity", 2,
"instanceType", new InstanceType("c5.large"),
"machineImageType", ecs.MachineImageType.getBOTTLEROCKET()));
To launch instances with ARM64 hardware, you can use the Amazon ECS-optimized Amazon Linux 2 (arm64) AMI. Based on Amazon Linux 2, this AMI is recommended for use when launching your EC2 instances that are powered by Arm-based AWS Graviton Processors.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
cluster.addCapacity("graviton-cluster", Map.of(
"minCapacity", 2,
"instanceType", new InstanceType("c6g.large"),
"machineImage", ecs.EcsOptimizedImage.amazonLinux2(ecs.AmiHardwareType.getARM())));
To add spot instances into the cluster, you must specify the spotPrice in the ecs.AddCapacityOptions and optionally enable the spotInstanceDraining property.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Add an AutoScalingGroup with spot instances to the existing cluster
cluster.addCapacity("AsgSpot", Map.of(
"maxCapacity", 2,
"minCapacity", 2,
"desiredCapacity", 2,
"instanceType", new InstanceType("c5.xlarge"),
"spotPrice", "0.0735",
// Enable the Automated Spot Draining support for Amazon ECS
"spotInstanceDraining", true));
When the ecs.AddCapacityOptions that you provide has a non-zero taskDrainTime (the default) then an SNS topic and Lambda are created to ensure that the
cluster's instances have been properly drained of tasks before terminating. The SNS Topic is sent the instance-terminating lifecycle event from the AutoScalingGroup,
and the Lambda acts on that event. If you wish to engage server-side encryption for this SNS Topic
then you may do so by providing a KMS key for the topicEncryptionKey property of ecs.AddCapacityOptions.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Given
Object key = kms.Key(...);
// Then, use that key to encrypt the lifecycle-event SNS Topic.
cluster.addCapacity("ASGEncryptedSNS", Map.of(
"instanceType", new InstanceType("t2.xlarge"),
"desiredCapacity", 3,
"topicEncryptionKey", key));
A task definition describes what a single copy of a task should look like. A task definition has one or more containers; typically, it has one main container (the default container is the first one that's added to the task definition, and it is marked essential) and optionally some supporting containers which are used to support the main container, doings things like upload logs or metrics to monitoring services.
To run a task or service with Amazon EC2 launch type, use the Ec2TaskDefinition. For AWS Fargate tasks/services, use the
FargateTaskDefinition. These classes provide a simplified API that only contain
properties relevant for that specific launch type.
For a FargateTaskDefinition, specify the task size (memoryLimitMiB and cpu):
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object fargateTaskDefinition = FargateTaskDefinition.Builder.create(this, "TaskDef")
.memoryLimitMiB(512)
.cpu(256)
.build();
To add containers to a task definition, call addContainer():
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object container = fargateTaskDefinition.addContainer("WebContainer", Map.of(
// Use an image from DockerHub
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample")));
For a Ec2TaskDefinition:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object ec2TaskDefinition = Ec2TaskDefinition.Builder.create(this, "TaskDef")
.networkMode(NetworkMode.getBRIDGE())
.build();
Object container = ec2TaskDefinition.addContainer("WebContainer", Map.of(
// Use an image from DockerHub
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample"),
"memoryLimitMiB", 1024));
You can specify container properties when you add them to the task definition, or with various methods, e.g.:
To add a port mapping when adding a container to the task definition, specify the portMappings option:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
taskDefinition.addContainer("WebContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample"),
"memoryLimitMiB", 1024,
"portMappings", asList(Map.of("containerPort", 3000))));
To add port mappings directly to a container definition, call addPortMappings():
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
container.addPortMappings(Map.of(
"containerPort", 3000));
To add data volumes to a task definition, call addVolume():
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
__object volume = Map.of(
// Use an Elastic FileSystem
"name", "mydatavolume",
"efsVolumeConfiguration", ecs.EfsVolumeConfiguration(Map.of(
"fileSystemId", "EFS")));
Object container = fargateTaskDefinition.addVolume("mydatavolume");
To use a TaskDefinition that can be used with either Amazon EC2 or
AWS Fargate launch types, use the TaskDefinition construct.
When creating a task definition you have to specify what kind of tasks you intend to run: Amazon EC2, AWS Fargate, or both. The following example uses both:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object taskDefinition = TaskDefinition.Builder.create(this, "TaskDef")
.memoryMiB("512")
.cpu("256")
.networkMode(NetworkMode.getAWS_VPC())
.compatibility(ecs.Compatibility.getEC2_AND_FARGATE())
.build();
Images supply the software that runs inside the container. Images can be obtained from either DockerHub or from ECR repositories, or built directly from a local Dockerfile.
ecs.ContainerImage.fromRegistry(imageName): use a public image.ecs.ContainerImage.fromRegistry(imageName, { credentials: mySecret }): use a private image that requires credentials.ecs.ContainerImage.fromEcrRepository(repo, tag): use the given ECR repository as the image
to start. If no tag is provided, "latest" is assumed.ecs.ContainerImage.fromAsset('./image'): build and upload an
image directly from a Dockerfile in your source directory.ecs.ContainerImage.fromDockerImageAsset(asset): uses an existing
@aws-cdk/aws-ecr-assets.DockerImageAsset as a container image.new ecs.TagParameterContainerImage(repository): use the given ECR repository as the image
but a CloudFormation parameter as the tag.
To pass environment variables to the container, you can use the environment, environmentFiles, and secrets props.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
taskDefinition.addContainer("container", Map.of(
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample"),
"memoryLimitMiB", 1024,
"environment", Map.of(// clear text, not for sensitive data
"STAGE", "prod"),
"environmentFiles", asList(ecs.EnvironmentFile.fromAsset("./demo-env-file.env"), ecs.EnvironmentFile.fromBucket(s3Bucket, "assets/demo-env-file.env")),
"secrets", Map.of(// Retrieved from AWS Secrets Manager or AWS Systems Manager Parameter Store at container start-up.
"SECRET", ecs.Secret.fromSecretsManager(secret),
"DB_PASSWORD", ecs.Secret.fromSecretsManager(dbSecret, "password"), // Reference a specific JSON field, (requires platform version 1.4.0 or later for Fargate tasks)
"PARAMETER", ecs.Secret.fromSsmParameter(parameter))));
The task execution role is automatically granted read permissions on the secrets/parameters. Support for environment files is restricted to the EC2 launch type for files hosted on S3. Further details provided in the AWS documentation about specifying environment variables.
A Service instantiates a TaskDefinition on a Cluster a given number of
times, optionally associating them with a load balancer.
If a task fails,
Amazon ECS automatically restarts the task.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object taskDefinition;
Object service = FargateService.Builder.create(this, "Service")
.cluster(cluster)
.taskDefinition(taskDefinition)
.desiredCount(5)
.build();
Services by default will create a security group if not provided.
If you'd like to specify which security groups to use you can override the securityGroups property.
Amazon ECS deployment circuit breaker
automatically rolls back unhealthy service deployments without the need for manual intervention. Use circuitBreaker to enable
deployment circuit breaker and optionally enable rollback for automatic rollback. See Using the deployment circuit breaker
for more details.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object service = FargateService.Builder.create(stack, "Service")
.cluster(cluster)
.taskDefinition(taskDefinition)
.circuitBreaker(Map.of("rollback", true))
.build();
Services are load balancing targets and can be added to a target group, which will be attached to an application/network load balancers:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
import software.amazon.awscdk.aws_elasticloadbalancingv2;
Object service = FargateService.Builder.create(this, "Service").build();
ApplicationLoadBalancer lb = new ApplicationLoadBalancer(this, "LB", new ApplicationLoadBalancerProps().vpc(vpc).internetFacing(true));
ApplicationListener listener = lb.addListener("Listener", new BaseApplicationListenerProps().port(80));
ApplicationTargetGroup targetGroup1 = listener.addTargets("ECS1", new AddApplicationTargetsProps()
.port(80)
.targets(asList(service)));
ApplicationTargetGroup targetGroup2 = listener.addTargets("ECS2", new AddApplicationTargetsProps()
.port(80)
.targets(asList(service.loadBalancerTarget(Map.of(
"containerName", "MyContainer",
"containerPort", 8080)))));
Note that in the example above, the default service only allows you to register the first essential container or the first mapped port on the container as a target and add it to a new target group. To have more control over which container and port to register as targets, you can use service.loadBalancerTarget() to return a load balancing target for a specific container and port.
Alternatively, you can also create all load balancer targets to be registered in this service, add them to target groups, and attach target groups to listeners accordingly.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
import software.amazon.awscdk.aws_elasticloadbalancingv2;
Object service = FargateService.Builder.create(this, "Service").build();
ApplicationLoadBalancer lb = new ApplicationLoadBalancer(this, "LB", new ApplicationLoadBalancerProps().vpc(vpc).internetFacing(true));
ApplicationListener listener = lb.addListener("Listener", new BaseApplicationListenerProps().port(80));
service.registerLoadBalancerTargets(Map.of(
"containerName", "web",
"containerPort", 80,
"newTargetGroupId", "ECS",
"listener", ecs.ListenerConfig.applicationListener(listener, Map.of(
"protocol", elbv2.ApplicationProtocol.getHTTPS()))));
If you want to put your Load Balancer and the Service it is load balancing to in
different stacks, you may not be able to use the convenience methods
loadBalancer.addListener() and listener.addTargets().
The reason is that these methods will create resources in the same Stack as the
object they're called on, which may lead to cyclic references between stacks.
Instead, you will have to create an ApplicationListener in the service stack,
or an empty TargetGroup in the load balancer stack that you attach your
service to.
See the ecs/cross-stack-load-balancer example for the alternatives.
Services can also be directly attached to a classic load balancer as targets:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826 import software.amazon.awscdk.aws_elasticloadbalancing; Object service = Ec2Service.Builder.create(this, "Service").build(); LoadBalancer lb = new LoadBalancer(stack, "LB", new LoadBalancerProps().vpc(vpc)); lb.addListener(new LoadBalancerListener().externalPort(80)); lb.addTarget(service);
Similarly, if you want to have more control over load balancer targeting:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
import software.amazon.awscdk.aws_elasticloadbalancing;
Object service = Ec2Service.Builder.create(this, "Service").build();
LoadBalancer lb = new LoadBalancer(stack, "LB", new LoadBalancerProps().vpc(vpc));
lb.addListener(new LoadBalancerListener().externalPort(80));
lb.addTarget(service.loadBalancerTarget(Map.of(
"containerName", "MyContainer",
"containerPort", 80)));
There are two higher-level constructs available which include a load balancer for you that can be found in the aws-ecs-patterns module:
LoadBalancedFargateServiceLoadBalancedEc2Service
You can configure the task count of a service to match demand. Task auto-scaling is
configured by calling autoScaleTaskCount():
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object scaling = service.autoScaleTaskCount(Map.of("maxCapacity", 10));
scaling.scaleOnCpuUtilization("CpuScaling", Map.of(
"targetUtilizationPercent", 50));
scaling.scaleOnRequestCount("RequestScaling", Map.of(
"requestsPerTarget", 10000,
"targetGroup", target));
Task auto-scaling is powered by Application Auto-Scaling. See that section for details.
To start an Amazon ECS task on an Amazon EC2-backed Cluster, instantiate an
@aws-cdk/aws-events-targets.EcsTask instead of an Ec2Service:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
import software.amazon.awscdk.aws_events_targets;
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromAsset(path.resolve(__dirname, "..", "eventhandler-image")),
"memoryLimitMiB", 256,
"logging", AwsLogDriver.Builder.create().streamPrefix("EventDemo").mode(AwsLogDriverMode.getNON_BLOCKING()).build()));
// An Rule that describes the event trigger (in this case a scheduled run)
Object rule = Rule.Builder.create(this, "Rule")
.schedule(events.Schedule.expression("rate(1 min)"))
.build();
// Pass an environment variable to the container 'TheContainer' in the task
rule.addTarget(new EcsTask(new EcsTaskProps()
.cluster(cluster)
.taskDefinition(taskDefinition)
.taskCount(1)
.containerOverrides(asList(new ContainerOverride()
.containerName("TheContainer")
.environment(asList(new TaskEnvironmentVariable()
.name("I_WAS_TRIGGERED")
.value("From CloudWatch Events")))))));
Currently Supported Log Drivers:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.awsLogs(Map.of("streamPrefix", "EventDemo"))));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.fluentd()));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.gelf(Map.of("address", "my-gelf-address"))));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.journald()));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.jsonFile()));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.splunk(Map.of(
"token", cdk.SecretValue.secretsManager("my-splunk-token"),
"url", "my-splunk-url"))));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.syslog()));
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", ecs.LogDrivers.firelens(Map.of(
"options", Map.of(
"Name", "firehose",
"region", "us-west-2",
"delivery_stream", "my-stream")))));
A generic log driver object exists to provide a lower level abstraction of the log driver configuration.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Create a Task Definition for the container to start
Object taskDefinition = new Ec2TaskDefinition(this, "TaskDef");
taskDefinition.addContainer("TheContainer", Map.of(
"image", ecs.ContainerImage.fromRegistry("example-image"),
"memoryLimitMiB", 256,
"logging", GenericLogDriver.Builder.create()
.logDriver("fluentd")
.options(Map.of(
"tag", "example-tag"))
.build()));
To register your ECS service with a CloudMap Service Registry, you may add the
cloudMapOptions property to your service:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object service = Ec2Service.Builder.create(stack, "Service")
.cluster(cluster)
.taskDefinition(taskDefinition)
.cloudMapOptions(Map.of(
// Create A records - useful for AWSVPC network mode.
"dnsRecordType", cloudmap.DnsRecordType.getA()))
.build();
With bridge or host network modes, only SRV DNS record types are supported.
By default, SRV DNS record types will target the default container and default
port. However, you may target a different container and port on the same ECS task:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
// Add a container to the task definition
Object specificContainer = taskDefinition.addContainer(...);
// Add a port mapping
specificContainer.addPortMappings(Map.of(
"containerPort", 7600,
"protocol", ecs.Protocol.getTCP()));
Ec2Service.Builder.create(stack, "Service")
.cluster(cluster)
.taskDefinition(taskDefinition)
.cloudMapOptions(Map.of(
// Create SRV records - useful for bridge networking
"dnsRecordType", cloudmap.DnsRecordType.getSRV(),
// Targets port TCP port 7600 `specificContainer`
"container", specificContainer,
"containerPort", 7600))
.build();
You may associate an ECS service with a specific CloudMap service. To do
this, use the service's associateCloudMapService method:
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object cloudMapService = new Service(...);
Object ecsService = new FargateService(...);
ecsService.associateCloudMapService(Map.of(
"service", cloudMapService));
There are two major families of Capacity Providers: AWS Fargate (including Fargate Spot) and EC2 Auto Scaling Group Capacity Providers. Both are supported.
To enable Fargate capacity providers, you can either set
enableFargateCapacityProviders to true when creating your cluster, or by
invoking the enableFargateCapacityProviders() method after creating your
cluster. This will add both FARGATE and FARGATE_SPOT as available capacity
providers on your cluster.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object cluster = Cluster.Builder.create(stack, "FargateCPCluster")
.vpc(vpc)
.enableFargateCapacityProviders(true)
.build();
Object taskDefinition = new FargateTaskDefinition(stack, "TaskDef");
taskDefinition.addContainer("web", Map.of(
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample")));
FargateService.Builder.create(stack, "FargateService")
.cluster(cluster)
.taskDefinition(taskDefinition)
.capacityProviderStrategies(asList(Map.of(
"capacityProvider", "FARGATE_SPOT",
"weight", 2), Map.of(
"capacityProvider", "FARGATE",
"weight", 1)))
.build();
To add an Auto Scaling Group Capacity Provider, first create an EC2 Auto Scaling
Group. Then, create an AsgCapacityProvider and pass the Auto Scaling Group to
it in the constructor. Then add the Capacity Provider to the cluster. Finally,
you can refer to the Provider by its name in your service's or task's Capacity
Provider strategy.
By default, an Auto Scaling Group Capacity Provider will manage the Auto Scaling
Group's size for you. It will also enable managed termination protection, in
order to prevent EC2 Auto Scaling from terminating EC2 instances that have tasks
running on them. If you want to disable this behavior, set both
enableManagedScaling to and enableManagedTerminationProtection to false.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Object cluster = Cluster.Builder.create(stack, "Cluster")
.vpc(vpc)
.build();
Object autoScalingGroup = AutoScalingGroup.Builder.create(stack, "ASG")
.vpc(vpc)
.instanceType(new InstanceType("t2.micro"))
.machineImage(ecs.EcsOptimizedImage.amazonLinux2())
.minCapacity(0)
.maxCapacity(100)
.build();
Object capacityProvider = AsgCapacityProvider.Builder.create(stack, "AsgCapacityProvider")
.autoScalingGroup(autoScalingGroup)
.build();
cluster.addAsgCapacityProvider(capacityProvider);
Object taskDefinition = new Ec2TaskDefinition(stack, "TaskDef");
taskDefinition.addContainer("web", Map.of(
"image", ecs.ContainerImage.fromRegistry("amazon/amazon-ecs-sample", memoryReservationMiB, 256)));
Ec2Service.Builder.create(stack, "EC2Service")
.cluster(cluster)
.taskDefinition(taskDefinition)
.capacityProviderStrategies(asList(Map.of(
"capacityProvider", capacityProvider.getCapacityProviderName(),
"weight", 1)))
.build();
Currently, this feature is only supported for services with EC2 launch types.
To add elastic inference accelerators to your EC2 instance, first add
inferenceAccelerators field to the Ec2TaskDefinition and set the deviceName
and deviceType properties.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Array inferenceAccelerators = asList(Map.of(
"deviceName", "device1",
"deviceType", "eia2.medium"));
Object taskDefinition = Ec2TaskDefinition.Builder.create(stack, "Ec2TaskDef")
.inferenceAccelerators(inferenceAccelerators)
.build();
To enable using the inference accelerators in the containers, add inferenceAcceleratorResources
field and set it to a list of device names used for the inference accelerators. Each value in the
list should match a DeviceName for an InferenceAccelerator specified in the task definition.
// Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
Array inferenceAcceleratorResources = asList("device1");
taskDefinition.addContainer("cont", Map.of(
"image", ecs.ContainerImage.fromRegistry("test"),
"memoryLimitMiB", 1024,
"inferenceAcceleratorResources", inferenceAcceleratorResources));
Copyright © 2021. All rights reserved.