ECS constructs and security features
Being an opinionated container management service from AWS, some constructs are unique to the ECS service. Since they are not commonly used across other tools or platforms in the container ecosystem, let’s briefly discuss them.
Important constructs used by ECS
Similar to how we declaratively define the state of our resources in a CloudFormation template, we use JSON-based manifests to outline the needs of our containers, how they are related to each other, as well as their integration with other services. The next step is to pass them over to ECS to manage.
Container definitions – the most basic level of container configuration
This is the lowest level of configuration detail expected from the user. Within a container definition, you can define properties such as Docker images, CPU and memory allocation, networking, security, Linux parameters, volume mounts, port mappings, and so on.
A container definition includes all...