https://github.com/nullstone-modules/aws-ecs-service
Nullstone module to launch an ECS container on AWS.
https://github.com/nullstone-modules/aws-ecs-service
Last synced: 4 months ago
JSON representation
Nullstone module to launch an ECS container on AWS.
- Host: GitHub
- URL: https://github.com/nullstone-modules/aws-ecs-service
- Owner: nullstone-modules
- License: mit
- Created: 2023-11-03T17:03:00.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2026-01-26T16:21:43.000Z (5 months ago)
- Last Synced: 2026-01-27T04:45:05.196Z (5 months ago)
- Language: HCL
- Size: 72.3 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
- Security: security-group.tf
Awesome Lists containing this project
README
# ECS Service
This app module is used to create a long-running service such as an API, Web App, or Background Worker.
To create a task/job that runs on a schedule or trigger, use ECS Task.
## When to use
ECS Service is a great choice for APIs, Web Apps, or Background Workers and you do not want to manage EC2 servers.
## Security & Compliance
Security scanning is graciously provided by [Bridgecrew](https://bridgecrew.io/).
Bridgecrew is the leading fully hosted, cloud-native solution providing continuous Terraform security and compliance.
## Platform
This module uses [AWS ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/Welcome.html), which is a technology that allows you to run container applications where AWS manages the scaling of EC2 (Virtual Machines) worker nodes.
## Network Access
When the service is provisioned, it is placed into private subnets on the connected network.
As a result, the ECS Service can route to services on the private network *and* is accessible on the private network.
## Public Access
To enable public access to the service, add an `Ingress` capability.
In most cases, a `Load Balancer` capability is the best choice for exposing as it enables rollout deployments with no downtime.
Additionally, a `Load Balancer` allows you to split traffic between more than 1 task based on load.
## Logs
Logs are automatically emitted to AWS Cloudwatch Log Group: `/`.
To access through the Nullstone CLI, use `nullstone logs` CLI command. (See [`logs`](https://docs.nullstone.io/getting-started/cli/docs.html#logs) for more information)
## Secrets
Nullstone automatically injects secrets into your ECS Service through environment variables.
(They are stored in AWS Secrets Manager and injected by AWS during launch.)
## Metric Alarms
### Target Group
Load Balancers use Target Groups as a backend registration.
As more containers are launched, AWS automatically registers these containers with the Target Group.
This app module enables the creation of Cloudwatch metric alarms through capability outputs.
This is especially useful when creating auto-scaling capabilities based on metrics on the Target Group (e.g. `RequestCountPerTarget`).
To create a metric alarm in a capability, add an output that looks like the following.
Note that `type` must be `"target-group"` and `name` must be unique amongst metric alarms.
```hcl
output "metric_alarms" {
value = [
{
type = "target-group"
name = "HighRequestCountPerTarget"
comparison_operator = "GreaterThanThreshold"
evaluation_periods = "2"
metric_name = "RequestCountPerTarget"
namespace = "AWS/ApplicationELB"
period = "60"
statistic = "Sum"
threshold = "1000"
alarm_description = "Triggers a scale up of containers when the TargetGroup has a high number of requests per target"
actions = jsonencode([aws_appautoscaling_policy.scale_up.arn])
}
]
}
```