AW

Amazon ECS & Fargate

Container orchestration, task definitions, and Fargate scaling

Details

Language / Topic
awsAmazon Web Services
Category
Infrastructure

Rules

balanced
- Default to Fargate compute engine for ECS to avoid managing underlying EC2 instances.
- Run distinct application tiers in separate Task Definitions with restricted IAM Task Roles.
- Default to AWS Fargate for ECS clusters to abstract away server management and patching, unless GPU or highly specific instance types are required.
- Assign the absolute minimum IAM permissions to the ECS Task Role independently from the Task Execution Role.
- Enable Container Insights for enhanced metrics and debugging.
- Use AWS Secrets Manager or Systems Manager Parameter Store integrated natively into the Task Definition to inject secrets.