AWS AmazonECS documentation change
Summary
Added section on creating services with custom task definitions and updated example ARNs
Security assessment
Documents operational feature without security context. ARN format corrections don't indicate security fixes.
Diff
diff --git a/AmazonECS/latest/developerguide/express-service-getting-started.md b/AmazonECS/latest/developerguide/express-service-getting-started.md index d7b83e6bc..aacf83ad5 100644 --- a//AmazonECS/latest/developerguide/express-service-getting-started.md +++ b//AmazonECS/latest/developerguide/express-service-getting-started.md @@ -155,0 +156,29 @@ This creates an application with: +### Create an Express Mode service with your own task definition + +You can also create an Express Mode service with your own task definition. With your own task definition, you have full control over task-level configuration. Express Mode continues to manage infrastructure, including load balancing, auto scaling, and canary deployments. + +The following AWS Command Line Interface (AWS AWS CLI) command creates an Express Mode service with a custom task definition: + + + aws ecs create-express-gateway-service \ + --infrastructure-role-arn arn:aws:iam::123456789012:role/ecsInfrastructureRoleForExpressServices \ + --task-definition-arn arn:aws:ecs:us-west-2:123456789012:task-definition/my-td:3 \ + --health-check-path "/health" \ + --monitor-resources + + +Your task definition must meet the following requirements: + + * A container named `Main` + + * The `Main` container must have a single TCP port mapping with a container port and port name + + * The task definition must have `FARGATE` in its compatibilities + + + + +###### Note + +The `taskDefinitionArn` parameter cannot be specified with `primaryContainer`, `executionRoleArn`, `taskRoleArn`, `cpu`, or `memory` in the same API call. Express Mode derives these values from the provided task definition. + @@ -161 +190 @@ The `--monitor-resources` flag works on any Create, Update or Delete call to you - aws ecs monitor-express-gateway-service --service-arn arn:aws:ecs:region:123456789012:service/app-23d97h88 + aws ecs monitor-express-gateway-service --service-arn arn:aws:ecs:region:123456789012:service/default/app-23d97h88 @@ -167 +196 @@ You can also find current configuration and status of your Express Mode service - aws ecs describe-express-gateway-service --service-arn arn:aws:ecs:region:123456789012:service/app-23d97h88 + aws ecs describe-express-gateway-service --service-arn arn:aws:ecs:region:123456789012:service/default/app-23d97h88