resource "aws_iam_role" "ecs_task_execution" {
name = "ecsTaskExecutionRole"
assume_role_policy = jsonencode({
Version = "2012-10-17",
Statement = [{
Action = "sts:AssumeRole",
Effect = "Allow",
Principal = {
Service = "ecs-tasks.amazonaws.com"
}
}]
})
}
resource "aws_iam_role_policy_attachment" "ecs_task_execution" {
role = aws_iam_role.ecs_task_execution.name
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
}
resource "aws_ecs_task_definition" "td" {
family = "wsi-td"
network_mode = "awsvpc"
requires_compatibilities = ["EC2"]
cpu = 512
memory = 1024
execution_role_arn = aws_iam_role.ecs_task_execution.arn
container_definitions = <<DEFINITION
[
{
"image": "nginx:latest",
"cpu": 512,
"memory": 1024,
"name": "wsi-container",
"networkMode": "awsvpc",
"portMappings": [
{
"containerPort": 80,
"hostPort": 80
}
],
"healthCheck": {
"command": [
"CMD-SHELL",
"curl -fLs http://localhost:80 > /dev/null"
],
"interval": 30,
"timeout": 5,
"retries": 3,
"startPeriod": 0
}
}
]
DEFINITION
}
JSON
복사