Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ resource "aws_iam_role" "execution" {
name = "${var.name_prefix}${var.aws_iam_role_execution_suffix}"
assume_role_policy = data.aws_iam_policy_document.task_assume.json
permissions_boundary = var.task_role_permissions_boundary_arn
tags = var.tags
}

resource "aws_iam_role_policy" "task_execution" {
Expand Down Expand Up @@ -49,6 +50,7 @@ resource "aws_iam_role" "task" {
name = "${var.name_prefix}${var.aws_iam_role_task_suffix}"
assume_role_policy = data.aws_iam_policy_document.task_assume.json
permissions_boundary = var.task_role_permissions_boundary_arn
tags = var.tags
}

resource "aws_iam_role_policy" "log_agent" {
Expand Down Expand Up @@ -175,6 +177,7 @@ resource "aws_ecs_task_definition" "task" {
cpu = var.task_definition_cpu
memory = var.task_definition_memory
task_role_arn = aws_iam_role.task.arn
tags = var.tags
dynamic "volume" {
for_each = var.efs_volumes
content {
Expand Down Expand Up @@ -221,6 +224,7 @@ resource "aws_ecs_service" "service" {
health_check_grace_period_seconds = var.lb_arn == "" ? null : var.health_check_grace_period_seconds
wait_for_steady_state = var.wait_for_steady_state
enable_execute_command = var.enable_execute_command
tags = var.tags
network_configuration {
subnets = var.private_subnet_ids
security_groups = concat([aws_security_group.ecs_service.id], var.service_sg_ids)
Expand Down
Loading