AWSx v1.0.0, Nov 28 22

awsx.ecs.EC2Service

Explore with Pulumi AI

Create an ECS Service resource for EC2 with the given unique name, arguments, and options. Creates Task definition if taskDefinitionArgs is specified.

Create EC2Service Resource

new EC2Service(name: string, args?: EC2ServiceArgs, opts?: CustomResourceOptions);

@overload
def EC2Service(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               cluster: Optional[str] = None,
               continue_before_steady_state: Optional[bool] = None,
               deployment_circuit_breaker: Optional[pulumi_aws.ecs.ServiceDeploymentCircuitBreakerArgs] = None,
               deployment_controller: Optional[pulumi_aws.ecs.ServiceDeploymentControllerArgs] = None,
               deployment_maximum_percent: Optional[int] = None,
               deployment_minimum_healthy_percent: Optional[int] = None,
               desired_count: Optional[int] = None,
               enable_ecs_managed_tags: Optional[bool] = None,
               enable_execute_command: Optional[bool] = None,
               force_new_deployment: Optional[bool] = None,
               health_check_grace_period_seconds: Optional[int] = None,
               iam_role: Optional[str] = None,
               load_balancers: Optional[Sequence[pulumi_aws.ecs.ServiceLoadBalancerArgs]] = None,
               name: Optional[str] = None,
               network_configuration: Optional[pulumi_aws.ecs.ServiceNetworkConfigurationArgs] = None,
               ordered_placement_strategies: Optional[Sequence[pulumi_aws.ecs.ServiceOrderedPlacementStrategyArgs]] = None,
               placement_constraints: Optional[Sequence[pulumi_aws.ecs.ServicePlacementConstraintArgs]] = None,
               platform_version: Optional[str] = None,
               propagate_tags: Optional[str] = None,
               scheduling_strategy: Optional[str] = None,
               service_registries: Optional[pulumi_aws.ecs.ServiceServiceRegistriesArgs] = None,
               tags: Optional[Mapping[str, str]] = None,
               task_definition: Optional[str] = None,
               task_definition_args: Optional[EC2ServiceTaskDefinitionArgs] = None)
@overload
def EC2Service(resource_name: str,
               args: Optional[EC2ServiceArgs] = None,
               opts: Optional[ResourceOptions] = None)

func NewEC2Service(ctx *Context, name string, args *EC2ServiceArgs, opts ...ResourceOption) (*EC2Service, error)

public EC2Service(string name, EC2ServiceArgs? args = null, CustomResourceOptions? opts = null)

public EC2Service(String name, EC2ServiceArgs args)
public EC2Service(String name, EC2ServiceArgs args, CustomResourceOptions options)

type: awsx:ecs:EC2Service
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args EC2ServiceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args EC2ServiceArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args EC2ServiceArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args EC2ServiceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args EC2ServiceArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

EC2Service Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The EC2Service resource accepts the following input properties:

Cluster string: ARN of an ECS cluster.
ContinueBeforeSteadyState bool: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
DeploymentCircuitBreaker Pulumi.Aws.Ecs.Inputs.ServiceDeploymentCircuitBreakerArgs: Configuration block for deployment circuit breaker. See below.
DeploymentController Pulumi.Aws.Ecs.Inputs.ServiceDeploymentControllerArgs: Configuration block for deployment controller configuration. See below.
DeploymentMaximumPercent int: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
DeploymentMinimumHealthyPercent int: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
DesiredCount int: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
EnableEcsManagedTags bool: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
EnableExecuteCommand bool: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
ForceNewDeployment bool: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
HealthCheckGracePeriodSeconds int: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
IamRole string: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
LoadBalancers List<Pulumi.Aws.Ecs.Inputs.ServiceLoadBalancerArgs>: Configuration block for load balancers. See below.
Name string: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
NetworkConfiguration Pulumi.Aws.Ecs.Inputs.ServiceNetworkConfigurationArgs: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
OrderedPlacementStrategies List<Pulumi.Aws.Ecs.Inputs.ServiceOrderedPlacementStrategyArgs>: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
PlacementConstraints List<Pulumi.Aws.Ecs.Inputs.ServicePlacementConstraintArgs>: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
PlatformVersion string: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
PropagateTags string: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
SchedulingStrategy string: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
ServiceRegistries Pulumi.Aws.Ecs.Inputs.ServiceServiceRegistriesArgs: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
Tags Dictionary<string, string>: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TaskDefinition string: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
TaskDefinitionArgs EC2ServiceTaskDefinitionArgs: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

Cluster string: ARN of an ECS cluster.
ContinueBeforeSteadyState bool: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
DeploymentCircuitBreaker ServiceDeploymentCircuitBreakerArgs: Configuration block for deployment circuit breaker. See below.
DeploymentController ServiceDeploymentControllerArgs: Configuration block for deployment controller configuration. See below.
DeploymentMaximumPercent int: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
DeploymentMinimumHealthyPercent int: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
DesiredCount int: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
EnableEcsManagedTags bool: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
EnableExecuteCommand bool: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
ForceNewDeployment bool: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
HealthCheckGracePeriodSeconds int: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
IamRole string: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
LoadBalancers ServiceLoadBalancerArgs: Configuration block for load balancers. See below.
Name string: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
NetworkConfiguration ServiceNetworkConfigurationArgs: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
OrderedPlacementStrategies ServiceOrderedPlacementStrategyArgs: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
PlacementConstraints ServicePlacementConstraintArgs: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
PlatformVersion string: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
PropagateTags string: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
SchedulingStrategy string: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
ServiceRegistries ServiceServiceRegistriesArgs: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
Tags map[string]string: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
TaskDefinition string: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
TaskDefinitionArgs EC2ServiceTaskDefinitionArgs: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

cluster String: ARN of an ECS cluster.
continueBeforeSteadyState Boolean: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
deploymentCircuitBreaker ServiceDeploymentCircuitBreakerArgs: Configuration block for deployment circuit breaker. See below.
deploymentController ServiceDeploymentControllerArgs: Configuration block for deployment controller configuration. See below.
deploymentMaximumPercent Integer: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
deploymentMinimumHealthyPercent Integer: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
desiredCount Integer: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
enableEcsManagedTags Boolean: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
enableExecuteCommand Boolean: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
forceNewDeployment Boolean: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
healthCheckGracePeriodSeconds Integer: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
iamRole String: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
loadBalancers List<ServiceLoadBalancerArgs>: Configuration block for load balancers. See below.
name String: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
networkConfiguration ServiceNetworkConfigurationArgs: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
orderedPlacementStrategies List<ServiceOrderedPlacementStrategyArgs>: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
placementConstraints List<ServicePlacementConstraintArgs>: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
platformVersion String: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
propagateTags String: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
schedulingStrategy String: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
serviceRegistries ServiceServiceRegistriesArgs: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
tags Map<String,String>: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
taskDefinition String: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
taskDefinitionArgs EC2ServiceTaskDefinitionArgs: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

cluster string: ARN of an ECS cluster.
continueBeforeSteadyState boolean: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
deploymentCircuitBreaker pulumiAws.types.input.ServiceDeploymentCircuitBreaker: Configuration block for deployment circuit breaker. See below.
deploymentController pulumiAws.types.input.ServiceDeploymentController: Configuration block for deployment controller configuration. See below.
deploymentMaximumPercent number: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
deploymentMinimumHealthyPercent number: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
desiredCount number: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
enableEcsManagedTags boolean: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
enableExecuteCommand boolean: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
forceNewDeployment boolean: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
healthCheckGracePeriodSeconds number: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
iamRole string: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
loadBalancers pulumiAws.types.input.ServiceLoadBalancer[]: Configuration block for load balancers. See below.
name string: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
networkConfiguration pulumiAws.types.input.ServiceNetworkConfiguration: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
orderedPlacementStrategies pulumiAws.types.input.ServiceOrderedPlacementStrategy[]: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
placementConstraints pulumiAws.types.input.ServicePlacementConstraint[]: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
platformVersion string: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
propagateTags string: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
schedulingStrategy string: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
serviceRegistries pulumiAws.types.input.ServiceServiceRegistries: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
tags {[key: string]: string}: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
taskDefinition string: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
taskDefinitionArgs EC2ServiceTaskDefinitionArgs: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

cluster str: ARN of an ECS cluster.
continue_before_steady_state bool: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
deployment_circuit_breaker ServiceDeploymentCircuitBreakerArgs: Configuration block for deployment circuit breaker. See below.
deployment_controller ServiceDeploymentControllerArgs: Configuration block for deployment controller configuration. See below.
deployment_maximum_percent int: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
deployment_minimum_healthy_percent int: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
desired_count int: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
enable_ecs_managed_tags bool: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
enable_execute_command bool: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
force_new_deployment bool: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
health_check_grace_period_seconds int: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
iam_role str: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
load_balancers ServiceLoadBalancerArgs]: Configuration block for load balancers. See below.
name str: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
network_configuration ServiceNetworkConfigurationArgs: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
ordered_placement_strategies ServiceOrderedPlacementStrategyArgs]: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
placement_constraints ServicePlacementConstraintArgs]: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
platform_version str: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
propagate_tags str: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
scheduling_strategy str: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
service_registries ServiceServiceRegistriesArgs: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
tags Mapping[str, str]: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
task_definition str: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
task_definition_args EC2ServiceTaskDefinitionArgs: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

cluster String: ARN of an ECS cluster.
continueBeforeSteadyState Boolean: If true, this provider will not wait for the service to reach a steady state (like aws ecs wait services-stable) before continuing. Default false.
deploymentCircuitBreaker Property Map: Configuration block for deployment circuit breaker. See below.
deploymentController Property Map: Configuration block for deployment controller configuration. See below.
deploymentMaximumPercent Number: Upper limit (as a percentage of the service's desiredCount) of the number of running tasks that can be running in a service during a deployment. Not valid when using the DAEMON scheduling strategy.
deploymentMinimumHealthyPercent Number: Lower limit (as a percentage of the service's desiredCount) of the number of running tasks that must remain running and healthy in a service during a deployment.
desiredCount Number: Number of instances of the task definition to place and keep running. Defaults to 0. Do not specify if using the DAEMON scheduling strategy.
enableEcsManagedTags Boolean: Specifies whether to enable Amazon ECS managed tags for the tasks within the service.
enableExecuteCommand Boolean: Specifies whether to enable Amazon ECS Exec for the tasks within the service.
forceNewDeployment Boolean: Enable to force a new task deployment of the service. This can be used to update tasks to use a newer Docker image with same image/tag combination (e.g., myimage:latest), roll Fargate tasks onto a newer platform version, or immediately deploy ordered_placement_strategy and placement_constraints updates.
healthCheckGracePeriodSeconds Number: Seconds to ignore failing load balancer health checks on newly instantiated tasks to prevent premature shutdown, up to 2147483647. Only valid for services configured to use load balancers.
iamRole String: ARN of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is required if you are using a load balancer with your service, but only if your task definition does not use the awsvpc network mode. If using awsvpc network mode, do not specify this role. If your account has already created the Amazon ECS service-linked role, that role is used by default for your service unless you specify a role here.
loadBalancers List<Property Map>: Configuration block for load balancers. See below.
name String: Name of the service (up to 255 letters, numbers, hyphens, and underscores)
networkConfiguration Property Map: Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. See below.
orderedPlacementStrategies List<Property Map>: Service level strategy rules that are taken into consideration during task placement. List from top to bottom in order of precedence. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. The maximum number of ordered_placement_strategy blocks is 5. See below.
placementConstraints List<Property Map>: Rules that are taken into consideration during task placement. Updates to this configuration will take effect next task deployment unless force_new_deployment is enabled. Maximum number of placement_constraints is 10. See below.
platformVersion String: Platform version on which to run your service. Only applicable for launch_type set to FARGATE. Defaults to LATEST. More information about Fargate platform versions can be found in the AWS ECS User Guide.
propagateTags String: Specifies whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION.
schedulingStrategy String: Scheduling strategy to use for the service. The valid values are REPLICA and DAEMON. Defaults to REPLICA. Note that Tasks using the Fargate launch type or the CODE_DEPLOY or EXTERNAL deployment controller types don't support the DAEMON scheduling strategy.
serviceRegistries Property Map: Service discovery registries for the service. The maximum number of service_registries blocks is 1. See below.
tags Map<String>: Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
taskDefinition String: Family and revision (family:revision) or full ARN of the task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.
taskDefinitionArgs Property Map: The args of task definition that you want to run in your service. Either [taskDefinition] or [taskDefinitionArgs] must be provided.

Outputs

All input properties are implicitly available as output properties. Additionally, the EC2Service resource produces the following output properties:

Service Pulumi.Aws.Ecs.Service: Underlying ECS Service resource

Service Service: Underlying ECS Service resource

service Service: Underlying ECS Service resource

service pulumiAws.Service: Underlying ECS Service resource

service Service: Underlying ECS Service resource

service aws::Service: Underlying ECS Service resource

Supporting Types

DefaultLogGroup

Args Pulumi.Awsx.Awsx.Inputs.LogGroup: Arguments to use instead of the default values during creation.
Existing Pulumi.Awsx.Awsx.Inputs.ExistingLogGroup: Identity of an existing log group to use. Cannot be used in combination with args or opts.
Skip bool: Skip creation of the log group.

Args LogGroup: Arguments to use instead of the default values during creation.
Existing ExistingLogGroup: Identity of an existing log group to use. Cannot be used in combination with args or opts.
Skip bool: Skip creation of the log group.

args LogGroup: Arguments to use instead of the default values during creation.
existing ExistingLogGroup: Identity of an existing log group to use. Cannot be used in combination with args or opts.
skip Boolean: Skip creation of the log group.

args awsx.LogGroup: Arguments to use instead of the default values during creation.
existing awsx.ExistingLogGroup: Identity of an existing log group to use. Cannot be used in combination with args or opts.
skip boolean: Skip creation of the log group.

args LogGroup: Arguments to use instead of the default values during creation.
existing ExistingLogGroup: Identity of an existing log group to use. Cannot be used in combination with args or opts.
skip bool: Skip creation of the log group.

args Property Map: Arguments to use instead of the default values during creation.
existing Property Map: Identity of an existing log group to use. Cannot be used in combination with args or opts.
skip Boolean: Skip creation of the log group.

DefaultRoleWithPolicy

Args Pulumi.Awsx.Awsx.Inputs.RoleWithPolicy: Args to use when creating the role and policies. Can't be specified if roleArn is used.
RoleArn string: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
Skip bool: Skips creation of the role if set to true.

Args RoleWithPolicy: Args to use when creating the role and policies. Can't be specified if roleArn is used.
RoleArn string: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
Skip bool: Skips creation of the role if set to true.

args RoleWithPolicy: Args to use when creating the role and policies. Can't be specified if roleArn is used.
roleArn String: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
skip Boolean: Skips creation of the role if set to true.

args awsx.RoleWithPolicy: Args to use when creating the role and policies. Can't be specified if roleArn is used.
roleArn string: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
skip boolean: Skips creation of the role if set to true.

args RoleWithPolicy: Args to use when creating the role and policies. Can't be specified if roleArn is used.
role_arn str: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
skip bool: Skips creation of the role if set to true.

args Property Map: Args to use when creating the role and policies. Can't be specified if roleArn is used.
roleArn String: ARN of existing role to use instead of creating a new role. Cannot be used in combination with args or opts.
skip Boolean: Skips creation of the role if set to true.

EC2ServiceTaskDefinition

Container TaskDefinitionContainerDefinition

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

Containers Dictionary<string, TaskDefinitionContainerDefinition>

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

Cpu string

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

EphemeralStorage Pulumi.Aws.Ecs.Inputs.TaskDefinitionEphemeralStorage

The amount of ephemeral storage to allocate for the task. This parameter is used to expand the total amount of ephemeral storage available, beyond the default amount, for tasks hosted on AWS Fargate. See Ephemeral Storage.

ExecutionRole Pulumi.Awsx.Awsx.Inputs.DefaultRoleWithPolicy

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

Family string

An optional unique name for your task definition. If not specified, then a default will be created.

InferenceAccelerators List<Pulumi.Aws.Ecs.Inputs.TaskDefinitionInferenceAccelerator>

Configuration block(s) with Inference Accelerators settings. Detailed below.

IpcMode string

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

LogGroup Pulumi.Awsx.Awsx.Inputs.DefaultLogGroup

A set of volume blocks that containers in your task may use.

Memory string

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

NetworkMode string

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

PidMode string

Process namespace to use for the containers in the task. The valid values are host and task.

PlacementConstraints List<Pulumi.Aws.Ecs.Inputs.TaskDefinitionPlacementConstraint>

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

ProxyConfiguration Pulumi.Aws.Ecs.Inputs.TaskDefinitionProxyConfiguration

Configuration block for the App Mesh proxy. Detailed below.

RuntimePlatform Pulumi.Aws.Ecs.Inputs.TaskDefinitionRuntimePlatform

Configuration block for runtime_platform that containers in your task may use.

SkipDestroy bool

Tags Dictionary<string, string>

Key-value map of resource tags.

TaskRole Pulumi.Awsx.Awsx.Inputs.DefaultRoleWithPolicy

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

Volumes List<Pulumi.Aws.Ecs.Inputs.TaskDefinitionVolume>

Configuration block for volumes that containers in your task may use. Detailed below.

Container TaskDefinitionContainerDefinition

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

Containers map[string]TaskDefinitionContainerDefinition

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

Cpu string

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

EphemeralStorage TaskDefinitionEphemeralStorage

ExecutionRole DefaultRoleWithPolicy

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

Family string

An optional unique name for your task definition. If not specified, then a default will be created.

InferenceAccelerators TaskDefinitionInferenceAccelerator

Configuration block(s) with Inference Accelerators settings. Detailed below.

IpcMode string

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

LogGroup DefaultLogGroup

A set of volume blocks that containers in your task may use.

Memory string

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

NetworkMode string

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

PidMode string

Process namespace to use for the containers in the task. The valid values are host and task.

PlacementConstraints TaskDefinitionPlacementConstraint

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

ProxyConfiguration TaskDefinitionProxyConfiguration

Configuration block for the App Mesh proxy. Detailed below.

RuntimePlatform TaskDefinitionRuntimePlatform

Configuration block for runtime_platform that containers in your task may use.

SkipDestroy bool

Tags map[string]string

Key-value map of resource tags.

TaskRole DefaultRoleWithPolicy

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

Volumes TaskDefinitionVolume

Configuration block for volumes that containers in your task may use. Detailed below.

container TaskDefinitionContainerDefinition

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

containers Map<String,TaskDefinitionContainerDefinition>

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

cpu String

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

ephemeralStorage TaskDefinitionEphemeralStorage

executionRole DefaultRoleWithPolicy

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

family String

An optional unique name for your task definition. If not specified, then a default will be created.

inferenceAccelerators List<TaskDefinitionInferenceAccelerator>

Configuration block(s) with Inference Accelerators settings. Detailed below.

ipcMode String

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

logGroup DefaultLogGroup

A set of volume blocks that containers in your task may use.

memory String

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

networkMode String

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

pidMode String

Process namespace to use for the containers in the task. The valid values are host and task.

placementConstraints List<TaskDefinitionPlacementConstraint>

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

proxyConfiguration TaskDefinitionProxyConfiguration

Configuration block for the App Mesh proxy. Detailed below.

runtimePlatform TaskDefinitionRuntimePlatform

Configuration block for runtime_platform that containers in your task may use.

skipDestroy Boolean

tags Map<String,String>

Key-value map of resource tags.

taskRole DefaultRoleWithPolicy

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

volumes List<TaskDefinitionVolume>

Configuration block for volumes that containers in your task may use. Detailed below.

container TaskDefinitionContainerDefinition

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

containers {[key: string]: TaskDefinitionContainerDefinition}

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

cpu string

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

ephemeralStorage pulumiAws.types.input.TaskDefinitionEphemeralStorage

executionRole awsx.DefaultRoleWithPolicy

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

family string

An optional unique name for your task definition. If not specified, then a default will be created.

inferenceAccelerators pulumiAws.types.input.TaskDefinitionInferenceAccelerator[]

Configuration block(s) with Inference Accelerators settings. Detailed below.

ipcMode string

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

logGroup awsx.DefaultLogGroup

A set of volume blocks that containers in your task may use.

memory string

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

networkMode string

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

pidMode string

Process namespace to use for the containers in the task. The valid values are host and task.

placementConstraints pulumiAws.types.input.TaskDefinitionPlacementConstraint[]

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

proxyConfiguration pulumiAws.types.input.TaskDefinitionProxyConfiguration

Configuration block for the App Mesh proxy. Detailed below.

runtimePlatform pulumiAws.types.input.TaskDefinitionRuntimePlatform

Configuration block for runtime_platform that containers in your task may use.

skipDestroy boolean

tags {[key: string]: string}

Key-value map of resource tags.

taskRole awsx.DefaultRoleWithPolicy

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

volumes pulumiAws.types.input.TaskDefinitionVolume[]

Configuration block for volumes that containers in your task may use. Detailed below.

container TaskDefinitionContainerDefinition

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

containers Mapping[str, TaskDefinitionContainerDefinition]

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

cpu str

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

ephemeral_storage TaskDefinitionEphemeralStorageArgs

execution_role DefaultRoleWithPolicy

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

family str

An optional unique name for your task definition. If not specified, then a default will be created.

inference_accelerators TaskDefinitionInferenceAcceleratorArgs]

Configuration block(s) with Inference Accelerators settings. Detailed below.

ipc_mode str

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

log_group DefaultLogGroup

A set of volume blocks that containers in your task may use.

memory str

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

network_mode str

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

pid_mode str

Process namespace to use for the containers in the task. The valid values are host and task.

placement_constraints TaskDefinitionPlacementConstraintArgs]

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

proxy_configuration TaskDefinitionProxyConfigurationArgs

Configuration block for the App Mesh proxy. Detailed below.

runtime_platform TaskDefinitionRuntimePlatformArgs

Configuration block for runtime_platform that containers in your task may use.

skip_destroy bool

tags Mapping[str, str]

Key-value map of resource tags.

task_role DefaultRoleWithPolicy

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

volumes TaskDefinitionVolumeArgs]

Configuration block for volumes that containers in your task may use. Detailed below.

container Property Map

Single container to make a TaskDefinition from. Useful for simple cases where there aren't multiple containers, especially when creating a TaskDefinition to call [run] on.

Either [container] or [containers] must be provided.

containers Map<Property Map>

All the containers to make a TaskDefinition from. Useful when creating a Service that will contain many containers within.

Either [container] or [containers] must be provided.

cpu String

The number of cpu units used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

ephemeralStorage Property Map

executionRole Property Map

The execution role that the Amazon ECS container agent and the Docker daemon can assume. Will be created automatically if not defined.

family String

An optional unique name for your task definition. If not specified, then a default will be created.

inferenceAccelerators List<Property Map>

Configuration block(s) with Inference Accelerators settings. Detailed below.

ipcMode String

IPC resource namespace to be used for the containers in the task The valid values are host, task, and none.

logGroup Property Map

A set of volume blocks that containers in your task may use.

memory String

The amount (in MiB) of memory used by the task. If not provided, a default will be computed based on the cumulative needs specified by [containerDefinitions]

networkMode String

Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host.

pidMode String

Process namespace to use for the containers in the task. The valid values are host and task.

placementConstraints List<Property Map>

Configuration block for rules that are taken into consideration during task placement. Maximum number of placement_constraints is 10. Detailed below.

proxyConfiguration Property Map

Configuration block for the App Mesh proxy. Detailed below.

runtimePlatform Property Map

Configuration block for runtime_platform that containers in your task may use.

skipDestroy Boolean

tags Map<String>

Key-value map of resource tags.

taskRole Property Map

IAM role that allows your Amazon ECS container task to make calls to other AWS services. Will be created automatically if not defined.

volumes List<Property Map>

Configuration block for volumes that containers in your task may use. Detailed below.

ExistingLogGroup

Arn string: Arn of the log group. Only one of [arn] or [name] can be specified.
Name string: Name of the log group. Only one of [arn] or [name] can be specified.
Region string: Region of the log group. If not specified, the provider region will be used.

Arn string: Arn of the log group. Only one of [arn] or [name] can be specified.
Name string: Name of the log group. Only one of [arn] or [name] can be specified.
Region string: Region of the log group. If not specified, the provider region will be used.

arn String: Arn of the log group. Only one of [arn] or [name] can be specified.
name String: Name of the log group. Only one of [arn] or [name] can be specified.
region String: Region of the log group. If not specified, the provider region will be used.

arn string: Arn of the log group. Only one of [arn] or [name] can be specified.
name string: Name of the log group. Only one of [arn] or [name] can be specified.
region string: Region of the log group. If not specified, the provider region will be used.

arn str: Arn of the log group. Only one of [arn] or [name] can be specified.
name str: Name of the log group. Only one of [arn] or [name] can be specified.
region str: Region of the log group. If not specified, the provider region will be used.

arn String: Arn of the log group. Only one of [arn] or [name] can be specified.
name String: Name of the log group. Only one of [arn] or [name] can be specified.
region String: Region of the log group. If not specified, the provider region will be used.

LogGroup

KmsKeyId string: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
Name string: The name of the log group. If omitted, this provider will assign a random, unique name.
NamePrefix string: Creates a unique name beginning with the specified prefix. Conflicts with name.
RetentionInDays int: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
Tags Dictionary<string, string>: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

KmsKeyId string: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
Name string: The name of the log group. If omitted, this provider will assign a random, unique name.
NamePrefix string: Creates a unique name beginning with the specified prefix. Conflicts with name.
RetentionInDays int: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
Tags map[string]string: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

kmsKeyId String: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
name String: The name of the log group. If omitted, this provider will assign a random, unique name.
namePrefix String: Creates a unique name beginning with the specified prefix. Conflicts with name.
retentionInDays Integer: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
tags Map<String,String>: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

kmsKeyId string: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
name string: The name of the log group. If omitted, this provider will assign a random, unique name.
namePrefix string: Creates a unique name beginning with the specified prefix. Conflicts with name.
retentionInDays number: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
tags {[key: string]: string}: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

kms_key_id str: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
name str: The name of the log group. If omitted, this provider will assign a random, unique name.
name_prefix str: Creates a unique name beginning with the specified prefix. Conflicts with name.
retention_in_days int: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
tags Mapping[str, str]: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

kmsKeyId String: The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group, AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires permissions for the CMK whenever the encrypted data is requested.
name String: The name of the log group. If omitted, this provider will assign a random, unique name.
namePrefix String: Creates a unique name beginning with the specified prefix. Conflicts with name.
retentionInDays Number: Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire.
tags Map<String>: A map of tags to assign to the resource. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

RoleWithPolicy

Description string: Description of the role.
ForceDetachPolicies bool: Whether to force detaching any policies the role has before destroying it. Defaults to false.
InlinePolicies List<Pulumi.Aws.Iam.Inputs.RoleInlinePolicy>: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
ManagedPolicyArns List<string>: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
MaxSessionDuration int: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
Name string: Name of the role policy.
NamePrefix string: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
Path string: Path to the role. See IAM Identifiers for more information.
PermissionsBoundary string: ARN of the policy that is used to set the permissions boundary for the role.
PolicyArns List<string>: ARNs of the policies to attach to the created role.
Tags Dictionary<string, string>: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Description string: Description of the role.
ForceDetachPolicies bool: Whether to force detaching any policies the role has before destroying it. Defaults to false.
InlinePolicies RoleInlinePolicy: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
ManagedPolicyArns []string: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
MaxSessionDuration int: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
Name string: Name of the role policy.
NamePrefix string: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
Path string: Path to the role. See IAM Identifiers for more information.
PermissionsBoundary string: ARN of the policy that is used to set the permissions boundary for the role.
PolicyArns []string: ARNs of the policies to attach to the created role.
Tags map[string]string: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

description String: Description of the role.
forceDetachPolicies Boolean: Whether to force detaching any policies the role has before destroying it. Defaults to false.
inlinePolicies List<RoleInlinePolicy>: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
managedPolicyArns List<String>: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
maxSessionDuration Integer: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
name String: Name of the role policy.
namePrefix String: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
path String: Path to the role. See IAM Identifiers for more information.
permissionsBoundary String: ARN of the policy that is used to set the permissions boundary for the role.
policyArns List<String>: ARNs of the policies to attach to the created role.
tags Map<String,String>: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

description string: Description of the role.
forceDetachPolicies boolean: Whether to force detaching any policies the role has before destroying it. Defaults to false.
inlinePolicies pulumiAws.types.input.iam.RoleInlinePolicy[]: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
managedPolicyArns string[]: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
maxSessionDuration number: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
name string: Name of the role policy.
namePrefix string: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
path string: Path to the role. See IAM Identifiers for more information.
permissionsBoundary string: ARN of the policy that is used to set the permissions boundary for the role.
policyArns string[]: ARNs of the policies to attach to the created role.
tags {[key: string]: string}: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

description str: Description of the role.
force_detach_policies bool: Whether to force detaching any policies the role has before destroying it. Defaults to false.
inline_policies RoleInlinePolicyArgs]: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
managed_policy_arns Sequence[str]: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
max_session_duration int: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
name str: Name of the role policy.
name_prefix str: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
path str: Path to the role. See IAM Identifiers for more information.
permissions_boundary str: ARN of the policy that is used to set the permissions boundary for the role.
policy_arns Sequence[str]: ARNs of the policies to attach to the created role.
tags Mapping[str, str]: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

description String: Description of the role.
forceDetachPolicies Boolean: Whether to force detaching any policies the role has before destroying it. Defaults to false.
inlinePolicies List<Property Map>: Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, this provider will not manage any inline policies in this resource. Configuring one empty block (i.e., inline_policy {}) will cause the provider to remove all inline policies added out of band on apply.
managedPolicyArns List<String>: Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, this provider will ignore policy attachments to this resource. When configured, the provider will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., managed_policy_arns = []) will cause the provider to remove all managed policy attachments.
maxSessionDuration Number: Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
name String: Name of the role policy.
namePrefix String: Creates a unique friendly name beginning with the specified prefix. Conflicts with name.
path String: Path to the role. See IAM Identifiers for more information.
permissionsBoundary String: ARN of the policy that is used to set the permissions boundary for the role.
policyArns List<String>: ARNs of the policies to attach to the created role.
tags Map<String>: Key-value mapping of tags for the IAM role. .If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

TaskDefinitionContainerDefinition

Command List<string>
Cpu int
DependsOn List<TaskDefinitionContainerDependency>
DisableNetworking bool
DnsSearchDomains List<string>
DnsServers List<string>
DockerLabels object
DockerSecurityOptions List<string>
EntryPoint List<string>
Environment List<TaskDefinitionKeyValuePair>: The environment variables to pass to a container
EnvironmentFiles List<TaskDefinitionEnvironmentFile>: The list of one or more files that contain the environment variables to pass to a container
Essential bool
ExtraHosts List<TaskDefinitionHostEntry>
FirelensConfiguration TaskDefinitionFirelensConfiguration
HealthCheck TaskDefinitionHealthCheck
Hostname string
Image string: The image used to start a container. This string is passed directly to the Docker daemon.
Interactive bool
Links List<string>
LinuxParameters TaskDefinitionLinuxParameters
LogConfiguration TaskDefinitionLogConfiguration
Memory int: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
MemoryReservation int
MountPoints List<TaskDefinitionMountPoint>
Name string: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
PortMappings List<TaskDefinitionPortMapping>: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
Privileged bool
PseudoTerminal bool
ReadonlyRootFilesystem bool
RepositoryCredentials TaskDefinitionRepositoryCredentials
ResourceRequirements List<TaskDefinitionResourceRequirement>
Secrets List<TaskDefinitionSecret>
StartTimeout int
StopTimeout int
SystemControls List<TaskDefinitionSystemControl>
Ulimits List<TaskDefinitionUlimit>
User string
VolumesFrom List<TaskDefinitionVolumeFrom>
WorkingDirectory string

Command []string
Cpu int
DependsOn []TaskDefinitionContainerDependency
DisableNetworking bool
DnsSearchDomains []string
DnsServers []string
DockerLabels interface{}
DockerSecurityOptions []string
EntryPoint []string
Environment []TaskDefinitionKeyValuePair: The environment variables to pass to a container
EnvironmentFiles []TaskDefinitionEnvironmentFile: The list of one or more files that contain the environment variables to pass to a container
Essential bool
ExtraHosts []TaskDefinitionHostEntry
FirelensConfiguration TaskDefinitionFirelensConfiguration
HealthCheck TaskDefinitionHealthCheck
Hostname string
Image string: The image used to start a container. This string is passed directly to the Docker daemon.
Interactive bool
Links []string
LinuxParameters TaskDefinitionLinuxParameters
LogConfiguration TaskDefinitionLogConfiguration
Memory int: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
MemoryReservation int
MountPoints []TaskDefinitionMountPoint
Name string: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
PortMappings []TaskDefinitionPortMapping: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
Privileged bool
PseudoTerminal bool
ReadonlyRootFilesystem bool
RepositoryCredentials TaskDefinitionRepositoryCredentials
ResourceRequirements []TaskDefinitionResourceRequirement
Secrets []TaskDefinitionSecret
StartTimeout int
StopTimeout int
SystemControls []TaskDefinitionSystemControl
Ulimits []TaskDefinitionUlimit
User string
VolumesFrom []TaskDefinitionVolumeFrom
WorkingDirectory string

command List<String>
cpu Integer
dependsOn List<TaskDefinitionContainerDependency>
disableNetworking Boolean
dnsSearchDomains List<String>
dnsServers List<String>
dockerLabels Object
dockerSecurityOptions List<String>
entryPoint List<String>
environment List<TaskDefinitionKeyValuePair>: The environment variables to pass to a container
environmentFiles List<TaskDefinitionEnvironmentFile>: The list of one or more files that contain the environment variables to pass to a container
essential Boolean
extraHosts List<TaskDefinitionHostEntry>
firelensConfiguration TaskDefinitionFirelensConfiguration
healthCheck TaskDefinitionHealthCheck
hostname String
image String: The image used to start a container. This string is passed directly to the Docker daemon.
interactive Boolean
links List<String>
linuxParameters TaskDefinitionLinuxParameters
logConfiguration TaskDefinitionLogConfiguration
memory Integer: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
memoryReservation Integer
mountPoints List<TaskDefinitionMountPoint>
name String: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
portMappings List<TaskDefinitionPortMapping>: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
privileged Boolean
pseudoTerminal Boolean
readonlyRootFilesystem Boolean
repositoryCredentials TaskDefinitionRepositoryCredentials
resourceRequirements List<TaskDefinitionResourceRequirement>
secrets List<TaskDefinitionSecret>
startTimeout Integer
stopTimeout Integer
systemControls List<TaskDefinitionSystemControl>
ulimits List<TaskDefinitionUlimit>
user String
volumesFrom List<TaskDefinitionVolumeFrom>
workingDirectory String

command string[]
cpu number
dependsOn TaskDefinitionContainerDependency[]
disableNetworking boolean
dnsSearchDomains string[]
dnsServers string[]
dockerLabels any
dockerSecurityOptions string[]
entryPoint string[]
environment TaskDefinitionKeyValuePair[]: The environment variables to pass to a container
environmentFiles TaskDefinitionEnvironmentFile[]: The list of one or more files that contain the environment variables to pass to a container
essential boolean
extraHosts TaskDefinitionHostEntry[]
firelensConfiguration TaskDefinitionFirelensConfiguration
healthCheck TaskDefinitionHealthCheck
hostname string
image string: The image used to start a container. This string is passed directly to the Docker daemon.
interactive boolean
links string[]
linuxParameters TaskDefinitionLinuxParameters
logConfiguration TaskDefinitionLogConfiguration
memory number: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
memoryReservation number
mountPoints TaskDefinitionMountPoint[]
name string: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
portMappings TaskDefinitionPortMapping[]: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
privileged boolean
pseudoTerminal boolean
readonlyRootFilesystem boolean
repositoryCredentials TaskDefinitionRepositoryCredentials
resourceRequirements TaskDefinitionResourceRequirement[]
secrets TaskDefinitionSecret[]
startTimeout number
stopTimeout number
systemControls TaskDefinitionSystemControl[]
ulimits TaskDefinitionUlimit[]
user string
volumesFrom TaskDefinitionVolumeFrom[]
workingDirectory string

command Sequence[str]
cpu int
depends_on Sequence[TaskDefinitionContainerDependency]
disable_networking bool
dns_search_domains Sequence[str]
dns_servers Sequence[str]
docker_labels Any
docker_security_options Sequence[str]
entry_point Sequence[str]
environment Sequence[TaskDefinitionKeyValuePair]: The environment variables to pass to a container
environment_files Sequence[TaskDefinitionEnvironmentFile]: The list of one or more files that contain the environment variables to pass to a container
essential bool
extra_hosts Sequence[TaskDefinitionHostEntry]
firelens_configuration TaskDefinitionFirelensConfiguration
health_check TaskDefinitionHealthCheck
hostname str
image str: The image used to start a container. This string is passed directly to the Docker daemon.
interactive bool
links Sequence[str]
linux_parameters TaskDefinitionLinuxParameters
log_configuration TaskDefinitionLogConfiguration
memory int: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
memory_reservation int
mount_points Sequence[TaskDefinitionMountPoint]
name str: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
port_mappings Sequence[TaskDefinitionPortMapping]: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
privileged bool
pseudo_terminal bool
readonly_root_filesystem bool
repository_credentials TaskDefinitionRepositoryCredentials
resource_requirements Sequence[TaskDefinitionResourceRequirement]
secrets Sequence[TaskDefinitionSecret]
start_timeout int
stop_timeout int
system_controls Sequence[TaskDefinitionSystemControl]
ulimits Sequence[TaskDefinitionUlimit]
user str
volumes_from Sequence[TaskDefinitionVolumeFrom]
working_directory str

command List<String>
cpu Number
dependsOn List<Property Map>
disableNetworking Boolean
dnsSearchDomains List<String>
dnsServers List<String>
dockerLabels Any
dockerSecurityOptions List<String>
entryPoint List<String>
environment List<Property Map>: The environment variables to pass to a container
environmentFiles List<Property Map>: The list of one or more files that contain the environment variables to pass to a container
essential Boolean
extraHosts List<Property Map>
firelensConfiguration Property Map
healthCheck Property Map
hostname String
image String: The image used to start a container. This string is passed directly to the Docker daemon.
interactive Boolean
links List<String>
linuxParameters Property Map
logConfiguration Property Map
memory Number: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed.
memoryReservation Number
mountPoints List<Property Map>
name String: The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
portMappings List<Property Map>: Port mappings allow containers to access ports on the host container instance to send or receive traffic.
privileged Boolean
pseudoTerminal Boolean
readonlyRootFilesystem Boolean
repositoryCredentials Property Map
resourceRequirements List<Property Map>
secrets List<Property Map>
startTimeout Number
stopTimeout Number
systemControls List<Property Map>
ulimits List<Property Map>
user String
volumesFrom List<Property Map>
workingDirectory String

TaskDefinitionContainerDependency

Condition string
ContainerName string

Condition string
ContainerName string

condition String
containerName String

condition string
containerName string

condition str
container_name str

condition String
containerName String

TaskDefinitionDevice

ContainerPath string
HostPath string
Permissions List<string>

ContainerPath string
HostPath string
Permissions []string

containerPath String
hostPath String
permissions List<String>

containerPath string
hostPath string
permissions string[]

container_path str
host_path str
permissions Sequence[str]

containerPath String
hostPath String
permissions List<String>

TaskDefinitionEnvironmentFile

Type string
Value string

Type string
Value string

type String
value String

type string
value string

type str
value str

type String
value String

TaskDefinitionFirelensConfiguration

Options object
Type string

Options interface{}
Type string

options Object
type String

options any
type string

options Any
type str

options Any
type String

TaskDefinitionHealthCheck

Command List<string>: A string array representing the command that the container runs to determine if it is healthy.
Interval int: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
Retries int: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
StartPeriod int: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
Timeout int: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.

Command []string: A string array representing the command that the container runs to determine if it is healthy.
Interval int: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
Retries int: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
StartPeriod int: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
Timeout int: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.

command List<String>: A string array representing the command that the container runs to determine if it is healthy.
interval Integer: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
retries Integer: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
startPeriod Integer: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
timeout Integer: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.

command string[]: A string array representing the command that the container runs to determine if it is healthy.
interval number: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
retries number: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
startPeriod number: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
timeout number: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.

command Sequence[str]: A string array representing the command that the container runs to determine if it is healthy.
interval int: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
retries int: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
start_period int: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
timeout int: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.

command List<String>: A string array representing the command that the container runs to determine if it is healthy.
interval Number: The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds.
retries Number: The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is three retries.
startPeriod Number: The optional grace period within which to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You may specify between 0 and 300 seconds. The startPeriod is disabled by default.
timeout Number: The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5 seconds.