CFN Fargate TaskDefinition and Service

cfn-fargate-service.yml

Resource:
...
  TaskDefinition:
    Type: AWS::ECS::TaskDefinition
    Properties:
      Family: !Sub '${Environment}-${ServiceName}'
      Cpu: !Ref 'ContainerCpu'
      Memory: !Ref 'ContainerMemory'
      NetworkMode: awsvpc
      RequiresCompatibilities:
        - FARGATE
      ExecutionRoleArn: {'Fn::ImportValue': !Sub '${ClusterStackName}:ECSTaskExecutionRole'}
      TaskRoleArn: !GetAtt TaskExecutionRole.Arn
      ContainerDefinitions:
        - Name: !Ref 'ServiceName'
          Cpu: !Ref 'ContainerCpu'
          Memory: !Ref 'ContainerMemory'
          Environment:
            - Name: AWS_REGION
              Value: !Ref "AWS::Region"
            - Name: DB_HOST
              Value: {'Fn::ImportValue': !Sub '${RDSStackName}:DBClusterEndpointAddress'}
            - Name: DB_PORT
              Value: {'Fn::ImportValue': !Sub '${RDSStackName}:DBClusterPort'}
            - Name: DB_DATABASE
              Value: !Sub '${Environment}_${ServiceName}'
            - Name: DB_USER
              Value: !Sub '${Environment}_${ServiceName}_user'
            - Name: DB_PASSWORD_SSM_KEY
              Value: !Sub '/${Environment}/${ServiceName}/db/password'
            - Name: DB_USERNAME_SSM_KEY
              Value: !Sub '/${Environment}/${ServiceName}/db/username'
            - Name: SERVICE_KMS_ALIAS
              Value: !Sub 'alias/${AWS::StackName}-Key'
          Image: !Ref 'ImageUrl'
          LogConfiguration:
            LogDriver: 'awslogs'
            Options:
              awslogs-group: !Ref DefaultLogGroup
              awslogs-region: !Ref AWS::Region
              awslogs-stream-prefix: !Ref Environment
          PortMappings:
            - ContainerPort: !Ref 'ContainerPort'

  Service:
    Type: AWS::ECS::Service
    DependsOn: [ LoadBalancerRule, CreateServiceDatabase ]
    Properties:
      ServiceName: !Ref 'ServiceName'
      Cluster: {'Fn::ImportValue': !Sub '${ClusterStackName}:ClusterName'}
      LaunchType: FARGATE
      HealthCheckGracePeriodSeconds: 360
      DeploymentConfiguration:
        MaximumPercent: 200
        MinimumHealthyPercent: 75
      DesiredCount: !Ref 'DesiredCount'
      NetworkConfiguration:
        AwsvpcConfiguration:
          AssignPublicIp: DISABLED
          SecurityGroups:
            - {'Fn::ImportValue': !Sub '${ClusterStackName}:FargateContainerSecurityGroup'}
          Subnets:
            - {'Fn::ImportValue': !Sub '${NetworkStackName}:PrivateSubnet1'}
            - {'Fn::ImportValue': !Sub '${NetworkStackName}:PrivateSubnet2'}
      TaskDefinition: !Ref 'TaskDefinition'
      LoadBalancers:
        - ContainerName: !Ref 'ServiceName'
          ContainerPort: !Ref 'ContainerPort'
          TargetGroupArn: !Ref 'TargetGroup'