Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement]: aws_ecs_cluster setting block enhancement request #35796

Open
mackeyaj opened this issue Feb 13, 2024 · 2 comments
Open

[Enhancement]: aws_ecs_cluster setting block enhancement request #35796

mackeyaj opened this issue Feb 13, 2024 · 2 comments
Labels
enhancement Requests to existing resources that expand the functionality or scope. service/ecs Issues and PRs that pertain to the ecs service.

Comments

@mackeyaj
Copy link

Description

AWS has a few other ECS Cluster settings that are able to be configured at a cluster level. At this time, it seems that only container Insights is able to be configured using the setting block in the aws_ecs_cluster resource. I am requesting the fargate FIPS Mode(This is supported in govcloud) be added if able. According to this document it looks like it may be possible to add a few other settings as well, such as guard duty integration and task retirement wait time. Here is the doc https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting

Affected Resource(s) and/or Data Source(s)

aws_ecs_cluster

Potential Terraform Configuration

resource "aws_ecs_cluster" "new_ecs_cluster" {
## Omitted other arguments for brevity
  setting {
            name = "fargateFIPSMode"
            value = "enabled"
  	  }
  setting {
            name = "fargateTaskRetirementWaitPeriod"
            value = 14
          }
  setting {
            name = "guardDutyActivate"
            value = on
          }
}

References

Whole Document

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fips-setting

FIPS Section for fargate

AWS Fargate Federal Information Processing Standard (FIPS-140) compliance

Task retirement section

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#fargate-retirement-wait-time

Guard duty section

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#guard-duty-integration

Would you like to implement a fix?

None

@mackeyaj mackeyaj added the enhancement Requests to existing resources that expand the functionality or scope. label Feb 13, 2024
Copy link

Community Note

Voting for Prioritization

  • Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
  • Please see our prioritization guide for information on how we prioritize.
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

  • If you are interested in working on this issue, please leave a comment.
  • If this would be your first contribution, please review the contribution guide.

@github-actions github-actions bot added the service/ecs Issues and PRs that pertain to the ecs service. label Feb 13, 2024
@terraform-aws-provider terraform-aws-provider bot added the needs-triage Waiting for first response or review from a maintainer. label Feb 13, 2024
@mackeyaj
Copy link
Author

👍

@justinretzolk justinretzolk removed the needs-triage Waiting for first response or review from a maintainer. label Feb 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Requests to existing resources that expand the functionality or scope. service/ecs Issues and PRs that pertain to the ecs service.
Projects
None yet
Development

No branches or pull requests

2 participants