module.yml

---
# Copyright 2018 widdix GmbH
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
AWSTemplateFormatVersion: '2010-09-09'
Description: 'cfn-modules: Fargate service'
# cfn-modules:implements()
Parameters:
  VpcModule:
    Description: 'Stack name of vpc module.'
    Type: String
  ClusterModule:
    Description: 'Optional stack name of ecs-cluster module (if empty, an ECS cluster is created).'
    Type: String
    Default: ''
  TargetModule:
    Description: 'Optional stack name of module implementing Target.'
    Type: String
    Default: ''
  FileSystemModule1:
    Description: 'Optional stack name of efs-file-system module.'
    Type: String
    Default: ''
  AlertingModule:
    Description: 'Optional but recommended stack name of alerting module.'
    Type: String
    Default: ''
  ClientSgModule1:
    Description: 'Optional stack name of client-sg module to mark traffic from Fargate task.'
    Type: String
    Default: ''
  ClientSgModule2:
    Description: 'Optional stack name of client-sg module to mark traffic from Fargate task.'
    Type: String
    Default: ''
  ClientSgModule3:
    Description: 'Optional stack name of client-sg module to mark traffic from Fargate task.'
    Type: String
    Default: ''
  ManagedPolicyArns:
    Description: 'Comma-delimited list of IAM managed policy ARNs to attach to the task''s IAM role'
    Type: String
    Default: ''
  ProxyImage:
    Description: 'Optional Docker image to use for the proxy container. You can use images in the Docker Hub registry or specify other repositories (repository-url/image:tag). If the repository is private, set ProxyyImageSecretModule as well!'
    Type: String
    Default: ''
  ProxyImageSecretModule:
    Description: 'Optional stack name of secret module which contains the repository credentials for private registry authentication.'
    Type: String
    Default: ''
  ProxyPort:
    Description: 'The port exposed by the proxy container that receives traffic from the load balancer (ProxyPort <> AppPort <> SidecarPort; ignored if ProxyImage is not set).'
    Type: Number
    Default: 8000
    MinValue: 1
    MaxValue: 49150
  ProxyEnvironment1Key:
    Description: 'Optional environment variable 1 key for proxy container.'
    Type: String
    Default: ''
  ProxyEnvironment1Value:
    Description: 'Optional environment variable 1 plain-text value for proxy container (if ProxyEnvironment1Key is set, set either ProxyEnvironment1Value or ProxyEnvironment1SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment1SecretModule:
    Description: 'Optional environment variable 1 stack name of secret module for proxy container (if ProxyEnvironment1Key is set, set either ProxyEnvironment1Value or ProxyEnvironment1SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment2Key:
    Description: 'Optional environment variable 2 key for proxy container.'
    Type: String
    Default: ''
  ProxyEnvironment2Value:
    Description: 'Optional environment variable 2 plain-text value for proxy container (if ProxyEnvironment2Key is set, set either ProxyEnvironment2Value or ProxyEnvironment2SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment2SecretModule:
    Description: 'Optional environment variable 2 stack name of secret module for proxy container (if ProxyEnvironment2Key is set, set either ProxyEnvironment2Value or ProxyEnvironment2SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment3Key:
    Description: 'Optional environment variable 3 key for proxy container.'
    Type: String
    Default: ''
  ProxyEnvironment3Value:
    Description: 'Optional environment variable 3 plain-text value for proxy container (if ProxyEnvironment3Key is set, set either ProxyEnvironment3Value or ProxyEnvironment3SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment3SecretModule:
    Description: 'Optional environment variable 3 stack name of secret module for proxy container (if ProxyEnvironment3Key is set, set either ProxyEnvironment3Value or ProxyEnvironment3SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment4Key:
    Description: 'Optional environment variable 4 key for proxy container.'
    Type: String
    Default: ''
  ProxyEnvironment4Value:
    Description: 'Optional environment variable 4 plain-text value for proxy container (if ProxyEnvironment4Key is set, set either ProxyEnvironment4Value or ProxyEnvironment4SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment4SecretModule:
    Description: 'Optional environment variable 4 stack name of secret module for proxy container (if ProxyEnvironment4Key is set, set either ProxyEnvironment4Value or ProxyEnvironment4SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment5Key:
    Description: 'Optional environment variable 5 key for proxy container.'
    Type: String
    Default: ''
  ProxyEnvironment5Value:
    Description: 'Optional environment variable 5 plain-text value for proxy container (if ProxyEnvironment5Key is set, set either ProxyEnvironment5Value or ProxyEnvironment5SecretModule).'
    Type: String
    Default: ''
  ProxyEnvironment5SecretModule:
    Description: 'Optional environment variable 5 stack name of secret module for proxy container (if ProxyEnvironment5Key is set, set either ProxyEnvironment5Value or ProxyEnvironment5SecretModule).'
    Type: String
    Default: ''
  AppImage:
    Description: 'The Docker image to use for the app container. You can use images in the Docker Hub registry or specify other repositories (repository-url/image:tag). If the repository is private, set AppImageSecretModule as well!'
    Type: String
    Default: 'public.ecr.aws/l0j0k6k8/hello:v1'
  AppImageSecretModule:
    Description: 'Optional stack name of secret module which contains the repository credentials for private registry authentication.'
    Type: String
    Default: ''
  AppPort:
    Description: 'The port exposed by the app container that receives traffic from the load balancer or the proxy container (AppPort <> ProxyPort <> SidecarPort).'
    Type: Number
    Default: 80
    MinValue: 1
    MaxValue: 49150
  AppEnvironment1Key:
    Description: 'Optional environment variable 1 key for app container.'
    Type: String
    Default: ''
  AppEnvironment1Value:
    Description: 'Optional environment variable 1 plain-text value for app container (if AppEnvironment1Key is set, set either AppEnvironment1Value or AppEnvironment1SecretModule).'
    Type: String
    Default: ''
  AppEnvironment1SecretModule:
    Description: 'Optional environment variable 1 stack name of secret module for app container (if AppEnvironment1Key is set, set either AppEnvironment1Value or AppEnvironment1SecretModule).'
    Type: String
    Default: ''
  AppEnvironment2Key:
    Description: 'Optional environment variable 2 key for app container.'
    Type: String
    Default: ''
  AppEnvironment2Value:
    Description: 'Optional environment variable 2 plain-text value for app container (if AppEnvironment2Key is set, set either AppEnvironment2Value or AppEnvironment2SecretModule).'
    Type: String
    Default: ''
  AppEnvironment2SecretModule:
    Description: 'Optional environment variable 2 stack name of secret module for app container (if AppEnvironment2Key is set, set either AppEnvironment2Value or AppEnvironment2SecretModule).'
    Type: String
    Default: ''
  AppEnvironment3Key:
    Description: 'Optional environment variable 3 key for app container.'
    Type: String
    Default: ''
  AppEnvironment3Value:
    Description: 'Optional environment variable 3 plain-text value for app container (if AppEnvironment3Key is set, set either AppEnvironment3Value or AppEnvironment3SecretModule).'
    Type: String
    Default: ''
  AppEnvironment3SecretModule:
    Description: 'Optional environment variable 3 stack name of secret module for app container (if AppEnvironment3Key is set, set either AppEnvironment3Value or AppEnvironment3SecretModule).'
    Type: String
    Default: ''
  AppEnvironment4Key:
    Description: 'Optional environment variable 4 key for app container.'
    Type: String
    Default: ''
  AppEnvironment4Value:
    Description: 'Optional environment variable 4 plain-text value for app container (if AppEnvironment4Key is set, set either AppEnvironment4Value or AppEnvironment4SecretModule).'
    Type: String
    Default: ''
  AppEnvironment4SecretModule:
    Description: 'Optional environment variable 4 stack name of secret module for app container (if AppEnvironment4Key is set, set either AppEnvironment4Value or AppEnvironment4SecretModule).'
    Type: String
    Default: ''
  AppEnvironment5Key:
    Description: 'Optional environment variable 5 key for app container.'
    Type: String
    Default: ''
  AppEnvironment5Value:
    Description: 'Optional environment variable 5 plain-text value for app container (if AppEnvironment5Key is set, set either AppEnvironment5Value or AppEnvironment5SecretModule).'
    Type: String
    Default: ''
  AppEnvironment5SecretModule:
    Description: 'Optional environment variable 5 stack name of secret module for app container (if AppEnvironment5Key is set, set either AppEnvironment5Value or AppEnvironment5SecretModule).'
    Type: String
    Default: ''
  AppEnvironment6Key:
    Description: 'Optional environment variable 6 key for app container.'
    Type: String
    Default: ''
  AppEnvironment6Value:
    Description: 'Optional environment variable 6 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment7Key:
    Description: 'Optional environment variable 7 key for app container.'
    Type: String
    Default: ''
  AppEnvironment7Value:
    Description: 'Optional environment variable 7 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment8Key:
    Description: 'Optional environment variable 8 key for app container.'
    Type: String
    Default: ''
  AppEnvironment8Value:
    Description: 'Optional environment variable 8 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment9Key:
    Description: 'Optional environment variable 9 key for app container.'
    Type: String
    Default: ''
  AppEnvironment9Value:
    Description: 'Optional environment variable 9 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment10Key:
    Description: 'Optional environment variable 10 key for app container.'
    Type: String
    Default: ''
  AppEnvironment10Value:
    Description: 'Optional environment variable 10 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment11Key:
    Description: 'Optional environment variable 11 key for app container.'
    Type: String
    Default: ''
  AppEnvironment11Value:
    Description: 'Optional environment variable 11 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment12Key:
    Description: 'Optional environment variable 12 key for app container.'
    Type: String
    Default: ''
  AppEnvironment12Value:
    Description: 'Optional environment variable 12 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment13Key:
    Description: 'Optional environment variable 13 key for app container.'
    Type: String
    Default: ''
  AppEnvironment13Value:
    Description: 'Optional environment variable 13 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment14Key:
    Description: 'Optional environment variable 14 key for app container.'
    Type: String
    Default: ''
  AppEnvironment14Value:
    Description: 'Optional environment variable 14 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment15Key:
    Description: 'Optional environment variable 15 key for app container.'
    Type: String
    Default: ''
  AppEnvironment15Value:
    Description: 'Optional environment variable 15 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment16Key:
    Description: 'Optional environment variable 16 key for app container.'
    Type: String
    Default: ''
  AppEnvironment16Value:
    Description: 'Optional environment variable 16 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment17Key:
    Description: 'Optional environment variable 17 key for app container.'
    Type: String
    Default: ''
  AppEnvironment17Value:
    Description: 'Optional environment variable 17 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment18Key:
    Description: 'Optional environment variable 18 key for app container.'
    Type: String
    Default: ''
  AppEnvironment18Value:
    Description: 'Optional environment variable 18 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment19Key:
    Description: 'Optional environment variable 19 key for app container.'
    Type: String
    Default: ''
  AppEnvironment19Value:
    Description: 'Optional environment variable 19 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment20Key:
    Description: 'Optional environment variable 20 key for app container.'
    Type: String
    Default: ''
  AppEnvironment20Value:
    Description: 'Optional environment variable 20 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment21Key:
    Description: 'Optional environment variable 21 key for app container.'
    Type: String
    Default: ''
  AppEnvironment21Value:
    Description: 'Optional environment variable 21 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment22Key:
    Description: 'Optional environment variable 22 key for app container.'
    Type: String
    Default: ''
  AppEnvironment22Value:
    Description: 'Optional environment variable 22 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment23Key:
    Description: 'Optional environment variable 23 key for app container.'
    Type: String
    Default: ''
  AppEnvironment23Value:
    Description: 'Optional environment variable 23 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment24Key:
    Description: 'Optional environment variable 24 key for app container.'
    Type: String
    Default: ''
  AppEnvironment24Value:
    Description: 'Optional environment variable 24 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment25Key:
    Description: 'Optional environment variable 25 key for app container.'
    Type: String
    Default: ''
  AppEnvironment25Value:
    Description: 'Optional environment variable 25 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment26Key:
    Description: 'Optional environment variable 26 key for app container.'
    Type: String
    Default: ''
  AppEnvironment26Value:
    Description: 'Optional environment variable 26 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment27Key:
    Description: 'Optional environment variable 27 key for app container.'
    Type: String
    Default: ''
  AppEnvironment27Value:
    Description: 'Optional environment variable 27 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment28Key:
    Description: 'Optional environment variable 28 key for app container.'
    Type: String
    Default: ''
  AppEnvironment28Value:
    Description: 'Optional environment variable 28 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment29Key:
    Description: 'Optional environment variable 29 key for app container.'
    Type: String
    Default: ''
  AppEnvironment29Value:
    Description: 'Optional environment variable 29 plain-text value for app container.'
    Type: String
    Default: ''
  AppEnvironment30Key:
    Description: 'Optional environment variable 30 key for app container.'
    Type: String
    Default: ''
  AppEnvironment30Value:
    Description: 'Optional environment variable 30 plain-text value for app container.'
    Type: String
    Default: ''
  AppCommand:
    Description: 'Optional command for starting app container.'
    Type: CommaDelimitedList
    Default: ''
  SidecarImage:
    Description: 'Optional Docker image to use for the sidecar container. You can use images in the Docker Hub registry or specify other repositories (repository-url/image:tag). If the repository is private, set SidecarImageSecretModule as well!'
    Type: String
    Default: ''
  SidecarImageSecretModule:
    Description: 'Optional stack name of secret module which contains the repository credentials for private registry authentication.'
    Type: String
    Default: ''
  SidecarPort:
    Description: 'The port exposed by the sidecar container reachable from the app container on host localhost (SidecarPort <> ProxyPort <> AppPort).'
    Type: Number
    Default: 9000
    MinValue: 1
    MaxValue: 49150
  SidecarProtocol:
    Description: 'The protocol used by the sidecar container reachable from the app container on host localhost.'
    Type: String
    Default: tcp
    AllowedValues: [tcp, udp]
  SidecarEnvironment1Key:
    Description: 'Optional environment variable 1 key for sidecar container.'
    Type: String
    Default: ''
  SidecarEnvironment1Value:
    Description: 'Optional environment variable 1 plain-text value for sidecar container (if SidecarEnvironment1Key is set, set either SidecarEnvironment1Value or SidecarEnvironment1SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment1SecretModule:
    Description: 'Optional environment variable 1 stack name of secret module for sidecar container (if SidecarEnvironment1Key is set, set either SidecarEnvironment1Value or SidecarEnvironment1SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment2Key:
    Description: 'Optional environment variable 2 key for sidecar container.'
    Type: String
    Default: ''
  SidecarEnvironment2Value:
    Description: 'Optional environment variable 2 plain-text value for sidecar container (if SidecarEnvironment2Key is set, set either SidecarEnvironment2Value or SidecarEnvironment2SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment2SecretModule:
    Description: 'Optional environment variable 2 stack name of secret module for sidecar container (if SidecarEnvironment2Key is set, set either SidecarEnvironment2Value or SidecarEnvironment2SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment3Key:
    Description: 'Optional environment variable 3 key for sidecar container.'
    Type: String
    Default: ''
  SidecarEnvironment3Value:
    Description: 'Optional environment variable 3 plain-text value for sidecar container (if SidecarEnvironment3Key is set, set either SidecarEnvironment3Value or SidecarEnvironment3SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment3SecretModule:
    Description: 'Optional environment variable 3 stack name of secret module for sidecar container (if SidecarEnvironment3Key is set, set either SidecarEnvironment3Value or SidecarEnvironment3SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment4Key:
    Description: 'Optional environment variable 4 key for sidecar container.'
    Type: String
    Default: ''
  SidecarEnvironment4Value:
    Description: 'Optional environment variable 4 plain-text value for sidecar container (if SidecarEnvironment4Key is set, set either SidecarEnvironment4Value or SidecarEnvironment4SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment4SecretModule:
    Description: 'Optional environment variable 4 stack name of secret module for sidecar container (if SidecarEnvironment4Key is set, set either SidecarEnvironment4Value or SidecarEnvironment4SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment5Key:
    Description: 'Optional environment variable 5 key for sidecar container.'
    Type: String
    Default: ''
  SidecarEnvironment5Value:
    Description: 'Optional environment variable 5 plain-text value for sidecar container (if SidecarEnvironment5Key is set, set either SidecarEnvironment5Value or SidecarEnvironment5SecretModule).'
    Type: String
    Default: ''
  SidecarEnvironment5SecretModule:
    Description: 'Optional environment variable 5 stack name of secret module for sidecar container (if SidecarEnvironment5Key is set, set either SidecarEnvironment5Value or SidecarEnvironment5SecretModule).'
    Type: String
    Default: ''
  Cpu:
    Description: 'The minimum number of vCPUs to reserve for the container.'
    Type: String
    Default: '0.25'
    AllowedValues: ['0.25', '0.5', '1', '2', '4']
  Memory:
    Description: 'The amount (in GB) of memory used by the task.'
    Type: String
    Default: '0.5'
    AllowedValues: ['0.5', '1', '2', '3', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14', '15', '16', '17', '18', '19', '20', '21', '22', '23', '24', '25', '26', '27', '28', '29', '30']
  DesiredCount:
    Description: 'The number of simultaneous tasks, that you want to run on the cluster.'
    Type: Number
    Default: 2
    ConstraintDescription: 'Must be >= 1'
    MinValue: 1
  MaxCapacity:
    Description: 'The maximum number of simultaneous tasks, that you want to run on the cluster.'
    Type: Number
    Default: 4
    ConstraintDescription: 'Must be >= 1'
    MinValue: 1
  MinCapacity:
    Description: 'The minimum number of simultaneous tasks, that you want to run on the cluster.'
    Type: Number
    Default: 2
    ConstraintDescription: 'Must be >= 1'
    MinValue: 1
  LogsRetentionInDays:
    Description: 'Specifies the number of days you want to retain log events in the specified log group.'
    Type: Number
    Default: 14
    AllowedValues: [1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653]
  SubnetsReach:
    Description: 'Should the service have direct access to the Internet or do you prefer private subnets with NAT?'
    Type: String
    Default: Public
    AllowedValues:
    - Public
    - Private
  AutoScaling:
    Description: 'Scale number of tasks based on CPU load?'
    Type: String
    Default: 'true'
    AllowedValues: ['true', 'false']
  HealthCheckGracePeriodSeconds:
    Description: 'The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing target health checks after a task has first started (ignored if TargetModule is not set).'
    Type: Number
    Default: 60
    MinValue: 0
    MaxValue: 1800
  Spot:
    Description: 'Run workload on spot capacity?'
    Type: String
    Default: false
    AllowedValues: [true, false]
  CpuArchitecture:
    Description: 'The CPU architecture of the container.'
    Type: String
    Default: 'X86_64'
    AllowedValues: ['X86_64', 'ARM64']
  OperatingSystemFamily:
    Description: 'The operating system family of the container.'
    Type: String
    Default: 'LINUX'
    AllowedValues: ['LINUX', 'WINDOWS_SERVER_2004_CORE', 'WINDOWS_SERVER_2016_FULL', 'WINDOWS_SERVER_2019_CORE', 'WINDOWS_SERVER_2019_FULL', 'WINDOWS_SERVER_2022_CORE', 'WINDOWS_SERVER_2022_FULL', 'WINDOWS_SERVER_20H2_CORE']
  ExecuteCommand:
    Description: 'Enable or disable ECS execute command.'
    Type: String
    Default: false
    AllowedValues: [true, false]
Mappings:
  CpuMap:
    '0.25':
      Cpu: 256
    '0.5':
      Cpu: 512
    '1':
      Cpu: 1024
    '2':
      Cpu: 2048
    '4':
      Cpu: 4096
  MemoryMap:
    '0.5':
      Memory: 512
    '1':
      Memory: 1024
    '2':
      Memory: 2048
    '3':
      Memory: 3072
    '4':
      Memory: 4096
    '5':
      Memory: 5120
    '6':
      Memory: 6144
    '7':
      Memory: 7168
    '8':
      Memory: 8192
    '9':
      Memory: 9216
    '10':
      Memory: 10240
    '11':
      Memory: 11264
    '12':
      Memory: 12288
    '13':
      Memory: 13312
    '14':
      Memory: 14336
    '15':
      Memory: 15360
    '16':
      Memory: 16384
    '17':
      Memory: 17408
    '18':
      Memory: 18432
    '19':
      Memory: 19456
    '20':
      Memory: 20480
    '21':
      Memory: 21504
    '22':
      Memory: 22528
    '23':
      Memory: 23552
    '24':
      Memory: 24576
    '25':
      Memory: 25600
    '26':
      Memory: 26624
    '27':
      Memory: 27648
    '28':
      Memory: 28672
    '29':
      Memory: 29696
    '30':
      Memory: 30720
Conditions:
  HasNotClusterModule: !Equals [!Ref ClusterModule, '']
  HasClusterModule: !Not [!Condition HasNotClusterModule]
  HasTargetModule: !Not [!Equals [!Ref TargetModule, '']]
  HasFileSystemModule1: !Not [!Equals [!Ref FileSystemModule1, '']]
  HasNotTargetModule: !Not [!Condition HasTargetModule]
  HasAlertingModule: !Not [!Equals [!Ref AlertingModule, '']]
  HasClientSgModule1: !Not [!Equals [!Ref ClientSgModule1, '']]
  HasClientSgModule2: !Not [!Equals [!Ref ClientSgModule2, '']]
  HasClientSgModule3: !Not [!Equals [!Ref ClientSgModule3, '']]
  HasSubnetsReachPublic: !Equals [!Ref SubnetsReach, Public]
  HasAutoScaling: !Equals [!Ref AutoScaling, 'true']
  HasManagedPolicyArns: !Not [!Equals [!Ref ManagedPolicyArns, '']]
  HasAppImageSecretModule: !Not [!Equals [!Ref AppImageSecretModule, '']]
  HasAppEnvironment1PlainText: !And [!Not [!Equals [!Ref AppEnvironment1Key, '']], !Equals [!Ref AppEnvironment1SecretModule, '']]
  HasAppEnvironment2PlainText: !And [!Not [!Equals [!Ref AppEnvironment2Key, '']], !Equals [!Ref AppEnvironment2SecretModule, '']]
  HasAppEnvironment3PlainText: !And [!Not [!Equals [!Ref AppEnvironment3Key, '']], !Equals [!Ref AppEnvironment3SecretModule, '']]
  HasAppEnvironment4PlainText: !And [!Not [!Equals [!Ref AppEnvironment4Key, '']], !Equals [!Ref AppEnvironment4SecretModule, '']]
  HasAppEnvironment5PlainText: !And [!Not [!Equals [!Ref AppEnvironment5Key, '']], !Equals [!Ref AppEnvironment5SecretModule, '']]
  HasAppEnvironment6PlainText: !Not [!Equals [!Ref AppEnvironment6Key, '']]
  HasAppEnvironment7PlainText: !Not [!Equals [!Ref AppEnvironment7Key, '']]
  HasAppEnvironment8PlainText: !Not [!Equals [!Ref AppEnvironment8Key, '']]
  HasAppEnvironment9PlainText: !Not [!Equals [!Ref AppEnvironment9Key, '']]
  HasAppEnvironment10PlainText: !Not [!Equals [!Ref AppEnvironment10Key, '']]
  HasAppEnvironment11PlainText: !Not [!Equals [!Ref AppEnvironment11Key, '']]
  HasAppEnvironment12PlainText: !Not [!Equals [!Ref AppEnvironment12Key, '']]
  HasAppEnvironment13PlainText: !Not [!Equals [!Ref AppEnvironment13Key, '']]
  HasAppEnvironment14PlainText: !Not [!Equals [!Ref AppEnvironment14Key, '']]
  HasAppEnvironment15PlainText: !Not [!Equals [!Ref AppEnvironment15Key, '']]
  HasAppEnvironment16PlainText: !Not [!Equals [!Ref AppEnvironment16Key, '']]
  HasAppEnvironment17PlainText: !Not [!Equals [!Ref AppEnvironment17Key, '']]
  HasAppEnvironment18PlainText: !Not [!Equals [!Ref AppEnvironment18Key, '']]
  HasAppEnvironment19PlainText: !Not [!Equals [!Ref AppEnvironment19Key, '']]
  HasAppEnvironment20PlainText: !Not [!Equals [!Ref AppEnvironment20Key, '']]
  HasAppEnvironment21PlainText: !Not [!Equals [!Ref AppEnvironment21Key, '']]
  HasAppEnvironment22PlainText: !Not [!Equals [!Ref AppEnvironment22Key, '']]
  HasAppEnvironment23PlainText: !Not [!Equals [!Ref AppEnvironment23Key, '']]
  HasAppEnvironment24PlainText: !Not [!Equals [!Ref AppEnvironment24Key, '']]
  HasAppEnvironment25PlainText: !Not [!Equals [!Ref AppEnvironment25Key, '']]
  HasAppEnvironment26PlainText: !Not [!Equals [!Ref AppEnvironment26Key, '']]
  HasAppEnvironment27PlainText: !Not [!Equals [!Ref AppEnvironment27Key, '']]
  HasAppEnvironment28PlainText: !Not [!Equals [!Ref AppEnvironment28Key, '']]
  HasAppEnvironment29PlainText: !Not [!Equals [!Ref AppEnvironment29Key, '']]
  HasAppEnvironment30PlainText: !Not [!Equals [!Ref AppEnvironment30Key, '']]
  HasAppCommand: !Not [!Equals [!Join ['', !Ref AppCommand], '']]
  HasAppEnvironment1Secret: !And [!Not [!Equals [!Ref AppEnvironment1Key, '']], !Not [!Equals [!Ref AppEnvironment1SecretModule, '']]]
  HasAppEnvironment2Secret: !And [!Not [!Equals [!Ref AppEnvironment2Key, '']], !Not [!Equals [!Ref AppEnvironment2SecretModule, '']]]
  HasAppEnvironment3Secret: !And [!Not [!Equals [!Ref AppEnvironment3Key, '']], !Not [!Equals [!Ref AppEnvironment3SecretModule, '']]]
  HasAppEnvironment4Secret: !And [!Not [!Equals [!Ref AppEnvironment4Key, '']], !Not [!Equals [!Ref AppEnvironment4SecretModule, '']]]
  HasAppEnvironment5Secret: !And [!Not [!Equals [!Ref AppEnvironment5Key, '']], !Not [!Equals [!Ref AppEnvironment5SecretModule, '']]]
  HasProxyImage: !Not [!Equals [!Ref ProxyImage, '']]
  HasProxyImageSecretModule: !Not [!Equals [!Ref ProxyImageSecretModule, '']]
  HasProxyEnvironment1PlainText: !And [!Not [!Equals [!Ref ProxyEnvironment1Key, '']], !Equals [!Ref ProxyEnvironment1SecretModule, '']]
  HasProxyEnvironment2PlainText: !And [!Not [!Equals [!Ref ProxyEnvironment2Key, '']], !Equals [!Ref ProxyEnvironment2SecretModule, '']]
  HasProxyEnvironment3PlainText: !And [!Not [!Equals [!Ref ProxyEnvironment3Key, '']], !Equals [!Ref ProxyEnvironment3SecretModule, '']]
  HasProxyEnvironment4PlainText: !And [!Not [!Equals [!Ref ProxyEnvironment4Key, '']], !Equals [!Ref ProxyEnvironment4SecretModule, '']]
  HasProxyEnvironment5PlainText: !And [!Not [!Equals [!Ref ProxyEnvironment5Key, '']], !Equals [!Ref ProxyEnvironment5SecretModule, '']]
  HasProxyEnvironment1Secret: !And [!Not [!Equals [!Ref ProxyEnvironment1Key, '']], !Not [!Equals [!Ref ProxyEnvironment1SecretModule, '']]]
  HasProxyEnvironment2Secret: !And [!Not [!Equals [!Ref ProxyEnvironment2Key, '']], !Not [!Equals [!Ref ProxyEnvironment2SecretModule, '']]]
  HasProxyEnvironment3Secret: !And [!Not [!Equals [!Ref ProxyEnvironment3Key, '']], !Not [!Equals [!Ref ProxyEnvironment3SecretModule, '']]]
  HasProxyEnvironment4Secret: !And [!Not [!Equals [!Ref ProxyEnvironment4Key, '']], !Not [!Equals [!Ref ProxyEnvironment4SecretModule, '']]]
  HasProxyEnvironment5Secret: !And [!Not [!Equals [!Ref ProxyEnvironment5Key, '']], !Not [!Equals [!Ref ProxyEnvironment5SecretModule, '']]]
  HasSidecarImage: !Not [!Equals [!Ref SidecarImage, '']]
  HasSidecarImageSecretModule: !Not [!Equals [!Ref SidecarImageSecretModule, '']]
  HasSidecarEnvironment1PlainText: !And [!Not [!Equals [!Ref SidecarEnvironment1Key, '']], !Equals [!Ref SidecarEnvironment1SecretModule, '']]
  HasSidecarEnvironment2PlainText: !And [!Not [!Equals [!Ref SidecarEnvironment2Key, '']], !Equals [!Ref SidecarEnvironment2SecretModule, '']]
  HasSidecarEnvironment3PlainText: !And [!Not [!Equals [!Ref SidecarEnvironment3Key, '']], !Equals [!Ref SidecarEnvironment3SecretModule, '']]
  HasSidecarEnvironment4PlainText: !And [!Not [!Equals [!Ref SidecarEnvironment4Key, '']], !Equals [!Ref SidecarEnvironment4SecretModule, '']]
  HasSidecarEnvironment5PlainText: !And [!Not [!Equals [!Ref SidecarEnvironment5Key, '']], !Equals [!Ref SidecarEnvironment5SecretModule, '']]
  HasSidecarEnvironment1Secret: !And [!Not [!Equals [!Ref SidecarEnvironment1Key, '']], !Not [!Equals [!Ref SidecarEnvironment1SecretModule, '']]]
  HasSidecarEnvironment2Secret: !And [!Not [!Equals [!Ref SidecarEnvironment2Key, '']], !Not [!Equals [!Ref SidecarEnvironment2SecretModule, '']]]
  HasSidecarEnvironment3Secret: !And [!Not [!Equals [!Ref SidecarEnvironment3Key, '']], !Not [!Equals [!Ref SidecarEnvironment3SecretModule, '']]]
  HasSidecarEnvironment4Secret: !And [!Not [!Equals [!Ref SidecarEnvironment4Key, '']], !Not [!Equals [!Ref SidecarEnvironment4SecretModule, '']]]
  HasSidecarEnvironment5Secret: !And [!Not [!Equals [!Ref SidecarEnvironment5Key, '']], !Not [!Equals [!Ref SidecarEnvironment5SecretModule, '']]]
  HasSpot: !Equals [!Ref Spot, 'true']
  HasExecuteCommand: !Equals [!Ref ExecuteCommand, 'true']
Resources:
  Cluster:
    Condition: HasNotClusterModule
    Type: 'AWS::ECS::Cluster'
    Properties: {}
  TaskExecutionRole:
    Type: 'AWS::IAM::Role'
    Properties:
      AssumeRolePolicyDocument:
        Statement:
        - Effect: Allow
          Principal:
            Service: 'ecs-tasks.amazonaws.com'
          Action: 'sts:AssumeRole'
      Policies:
      - PolicyName: AmazonECSTaskExecutionRolePolicy # https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html
        PolicyDocument:
          Statement:
          - Effect: Allow
            Action:
            - 'ecr:GetAuthorizationToken'
            - 'ecr:BatchCheckLayerAvailability'
            - 'ecr:GetDownloadUrlForLayer'
            - 'ecr:BatchGetImage'
            Resource: '*'
          - Effect: Allow
            Action:
            - 'logs:CreateLogStream'
            - 'logs:PutLogEvents'
            Resource: !GetAtt 'LogGroup.Arn'
          - Effect: Allow
            Action: 'kms:Decrypt'
            Resource: '*'
          - !If
            - HasProxyImageSecretModule
            - Effect: Allow
              Action: 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${ProxyImageSecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppImageSecretModule
            - Effect: Allow
              Action: 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppImageSecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasSidecarImageSecretModule
            - Effect: Allow
              Action: 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${SidecarImageSecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppEnvironment1Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppEnvironment1SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppEnvironment2Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppEnvironment2SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppEnvironment3Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppEnvironment3SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppEnvironment4Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppEnvironment4SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasAppEnvironment5Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${AppEnvironment5SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasProxyEnvironment1Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${ProxyEnvironment1SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasProxyEnvironment2Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${ProxyEnvironment2SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasProxyEnvironment3Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${ProxyEnvironment3SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasSidecarEnvironment1Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${SidecarEnvironment1SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasSidecarEnvironment2Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${SidecarEnvironment2SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
          - !If
            - HasSidecarEnvironment3Secret
            - Effect: Allow
              Action:
              - 'secretsmanager:GetSecretValue'
              Resource: {'Fn::ImportValue': !Sub '${SidecarEnvironment3SecretModule}-Arn'}
            - !Ref 'AWS::NoValue'
  TaskRole:
    Type: 'AWS::IAM::Role'
    Properties:
      AssumeRolePolicyDocument:
        Statement:
        - Effect: Allow
          Principal:
            Service: 'ecs-tasks.amazonaws.com'
          Action: 'sts:AssumeRole'
      Policies:
      - !If
        - HasExecuteCommand
        - PolicyName: AmazonECSTaskRolePolicy # https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html
          PolicyDocument:
            Statement:
            - Effect: Allow
              Action:
              - 'ssmmessages:CreateControlChannel'
              - 'ssmmessages:CreateDataChannel'
              - 'ssmmessages:OpenControlChannel'
              - 'ssmmessages:OpenDataChannel'
              Resource: '*'
        - !Ref 'AWS::NoValue'
      ManagedPolicyArns: !If [HasManagedPolicyArns, !Split [',', !Ref ManagedPolicyArns], !Ref 'AWS::NoValue']
  TaskDefinition:
    Type: 'AWS::ECS::TaskDefinition'
    Properties:
      ContainerDefinitions:
      - !If
        - HasProxyImage
        - Name: proxy
          Image: !Ref ProxyImage
          RepositoryCredentials: !If [HasProxyImageSecretModule, {CredentialsParameter: {'Fn::ImportValue': !Sub '${ProxyImageSecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          PortMappings:
          - !If [HasTargetModule, {ContainerPort: !Ref ProxyPort, Protocol: tcp}, !Ref 'AWS::NoValue']
          Essential: true
          LogConfiguration:
            LogDriver: awslogs
            Options:
              'awslogs-region': !Ref 'AWS::Region'
              'awslogs-group': !Ref LogGroup
              'awslogs-stream-prefix': proxy
          Environment:
          - !If [HasProxyEnvironment1PlainText, {Name: !Ref ProxyEnvironment1Key, Value: !Ref ProxyEnvironment1Value}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment2PlainText, {Name: !Ref ProxyEnvironment2Key, Value: !Ref ProxyEnvironment2Value}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment3PlainText, {Name: !Ref ProxyEnvironment3Key, Value: !Ref ProxyEnvironment3Value}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment4PlainText, {Name: !Ref ProxyEnvironment4Key, Value: !Ref ProxyEnvironment4Value}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment5PlainText, {Name: !Ref ProxyEnvironment5Key, Value: !Ref ProxyEnvironment5Value}, !Ref 'AWS::NoValue']
          Secrets:
          - !If [HasProxyEnvironment1Secret, {Name: !Ref ProxyEnvironment1Key, ValueFrom: {'Fn::ImportValue': !Sub '${ProxyEnvironment1SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment2Secret, {Name: !Ref ProxyEnvironment2Key, ValueFrom: {'Fn::ImportValue': !Sub '${ProxyEnvironment2SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment3Secret, {Name: !Ref ProxyEnvironment3Key, ValueFrom: {'Fn::ImportValue': !Sub '${ProxyEnvironment3SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment4Secret, {Name: !Ref ProxyEnvironment4Key, ValueFrom: {'Fn::ImportValue': !Sub '${ProxyEnvironment4SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasProxyEnvironment5Secret, {Name: !Ref ProxyEnvironment5Key, ValueFrom: {'Fn::ImportValue': !Sub '${ProxyEnvironment5SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          MountPoints:
          - !If [HasFileSystemModule1, {ContainerPath: '/mnt/efs1', SourceVolume: efs1}, !Ref 'AWS::NoValue']
        - !Ref 'AWS::NoValue'
      - Name: app
        Image: !Ref AppImage
        RepositoryCredentials: !If [HasAppImageSecretModule, {CredentialsParameter: {'Fn::ImportValue': !Sub '${AppImageSecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        PortMappings:
        - !If [HasProxyImage, {ContainerPort: !Ref AppPort, Protocol: tcp}, !If [HasTargetModule, {ContainerPort: !Ref AppPort, Protocol: tcp}, !Ref 'AWS::NoValue']]
        Essential: true
        Command: !If [HasAppCommand, !Ref AppCommand, !Ref 'AWS::NoValue']
        LogConfiguration:
          LogDriver: awslogs
          Options:
            'awslogs-region': !Ref 'AWS::Region'
            'awslogs-group': !Ref LogGroup
            'awslogs-stream-prefix': app
        Environment:
        - !If [HasAppEnvironment1PlainText, {Name: !Ref AppEnvironment1Key, Value: !Ref AppEnvironment1Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment2PlainText, {Name: !Ref AppEnvironment2Key, Value: !Ref AppEnvironment2Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment3PlainText, {Name: !Ref AppEnvironment3Key, Value: !Ref AppEnvironment3Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment4PlainText, {Name: !Ref AppEnvironment4Key, Value: !Ref AppEnvironment4Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment5PlainText, {Name: !Ref AppEnvironment5Key, Value: !Ref AppEnvironment5Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment6PlainText, {Name: !Ref AppEnvironment6Key, Value: !Ref AppEnvironment6Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment7PlainText, {Name: !Ref AppEnvironment7Key, Value: !Ref AppEnvironment7Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment8PlainText, {Name: !Ref AppEnvironment8Key, Value: !Ref AppEnvironment8Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment9PlainText, {Name: !Ref AppEnvironment9Key, Value: !Ref AppEnvironment9Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment10PlainText, {Name: !Ref AppEnvironment10Key, Value: !Ref AppEnvironment10Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment11PlainText, {Name: !Ref AppEnvironment11Key, Value: !Ref AppEnvironment11Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment12PlainText, {Name: !Ref AppEnvironment12Key, Value: !Ref AppEnvironment12Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment13PlainText, {Name: !Ref AppEnvironment13Key, Value: !Ref AppEnvironment13Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment14PlainText, {Name: !Ref AppEnvironment14Key, Value: !Ref AppEnvironment14Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment15PlainText, {Name: !Ref AppEnvironment15Key, Value: !Ref AppEnvironment15Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment16PlainText, {Name: !Ref AppEnvironment16Key, Value: !Ref AppEnvironment16Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment17PlainText, {Name: !Ref AppEnvironment17Key, Value: !Ref AppEnvironment17Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment18PlainText, {Name: !Ref AppEnvironment18Key, Value: !Ref AppEnvironment18Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment19PlainText, {Name: !Ref AppEnvironment19Key, Value: !Ref AppEnvironment19Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment20PlainText, {Name: !Ref AppEnvironment20Key, Value: !Ref AppEnvironment20Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment21PlainText, {Name: !Ref AppEnvironment21Key, Value: !Ref AppEnvironment21Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment22PlainText, {Name: !Ref AppEnvironment22Key, Value: !Ref AppEnvironment22Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment23PlainText, {Name: !Ref AppEnvironment23Key, Value: !Ref AppEnvironment23Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment24PlainText, {Name: !Ref AppEnvironment24Key, Value: !Ref AppEnvironment24Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment25PlainText, {Name: !Ref AppEnvironment25Key, Value: !Ref AppEnvironment25Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment26PlainText, {Name: !Ref AppEnvironment26Key, Value: !Ref AppEnvironment26Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment27PlainText, {Name: !Ref AppEnvironment27Key, Value: !Ref AppEnvironment27Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment28PlainText, {Name: !Ref AppEnvironment28Key, Value: !Ref AppEnvironment28Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment29PlainText, {Name: !Ref AppEnvironment29Key, Value: !Ref AppEnvironment29Value}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment30PlainText, {Name: !Ref AppEnvironment30Key, Value: !Ref AppEnvironment30Value}, !Ref 'AWS::NoValue']
        Secrets:
        - !If [HasAppEnvironment1Secret, {Name: !Ref AppEnvironment1Key, ValueFrom: {'Fn::ImportValue': !Sub '${AppEnvironment1SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment2Secret, {Name: !Ref AppEnvironment2Key, ValueFrom: {'Fn::ImportValue': !Sub '${AppEnvironment2SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment3Secret, {Name: !Ref AppEnvironment3Key, ValueFrom: {'Fn::ImportValue': !Sub '${AppEnvironment3SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment4Secret, {Name: !Ref AppEnvironment4Key, ValueFrom: {'Fn::ImportValue': !Sub '${AppEnvironment4SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        - !If [HasAppEnvironment5Secret, {Name: !Ref AppEnvironment5Key, ValueFrom: {'Fn::ImportValue': !Sub '${AppEnvironment5SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
        MountPoints:
        - !If [HasFileSystemModule1, {ContainerPath: '/mnt/efs1', SourceVolume: efs1}, !Ref 'AWS::NoValue']
      - !If
        - HasSidecarImage
        - Name: sidecar
          Image: !Ref SidecarImage
          RepositoryCredentials: !If [HasSidecarImageSecretModule, {CredentialsParameter: {'Fn::ImportValue': !Sub '${SidecarImageSecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          PortMappings:
          - ContainerPort: !Ref SidecarPort
            Protocol: !Ref SidecarProtocol
          Essential: false
          LogConfiguration:
            LogDriver: awslogs
            Options:
              'awslogs-region': !Ref 'AWS::Region'
              'awslogs-group': !Ref LogGroup
              'awslogs-stream-prefix': sidecar
          Environment:
          - !If [HasSidecarEnvironment1PlainText, {Name: !Ref SidecarEnvironment1Key, Value: !Ref SidecarEnvironment1Value}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment2PlainText, {Name: !Ref SidecarEnvironment2Key, Value: !Ref SidecarEnvironment2Value}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment3PlainText, {Name: !Ref SidecarEnvironment3Key, Value: !Ref SidecarEnvironment3Value}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment4PlainText, {Name: !Ref SidecarEnvironment4Key, Value: !Ref SidecarEnvironment4Value}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment5PlainText, {Name: !Ref SidecarEnvironment5Key, Value: !Ref SidecarEnvironment5Value}, !Ref 'AWS::NoValue']
          Secrets:
          - !If [HasSidecarEnvironment1Secret, {Name: !Ref SidecarEnvironment1Key, ValueFrom: {'Fn::ImportValue': !Sub '${SidecarEnvironment1SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment2Secret, {Name: !Ref SidecarEnvironment2Key, ValueFrom: {'Fn::ImportValue': !Sub '${SidecarEnvironment2SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment3Secret, {Name: !Ref SidecarEnvironment3Key, ValueFrom: {'Fn::ImportValue': !Sub '${SidecarEnvironment3SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment4Secret, {Name: !Ref SidecarEnvironment4Key, ValueFrom: {'Fn::ImportValue': !Sub '${SidecarEnvironment4SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          - !If [HasSidecarEnvironment5Secret, {Name: !Ref SidecarEnvironment5Key, ValueFrom: {'Fn::ImportValue': !Sub '${SidecarEnvironment5SecretModule}-Arn'}}, !Ref 'AWS::NoValue']
          MountPoints:
          - !If [HasFileSystemModule1, {ContainerPath: '/mnt/efs1', SourceVolume: efs1}, !Ref 'AWS::NoValue']
        - !Ref 'AWS::NoValue'
      Cpu: !FindInMap [CpuMap, !Ref Cpu, Cpu]
      ExecutionRoleArn: !GetAtt 'TaskExecutionRole.Arn'
      Family: !Ref 'AWS::StackName'
      Memory: !FindInMap [MemoryMap, !Ref Memory, Memory]
      NetworkMode: awsvpc
      RequiresCompatibilities: [FARGATE]
      TaskRoleArn: !GetAtt 'TaskRole.Arn'
      Volumes:
      - !If [HasFileSystemModule1, {EFSVolumeConfiguration: {FilesystemId: {'Fn::ImportValue': !Sub '${FileSystemModule1}-Id'}, TransitEncryption: ENABLED}, Name: efs1}, !Ref 'AWS::NoValue']
      RuntimePlatform:
        CpuArchitecture: !Ref CpuArchitecture
        OperatingSystemFamily: !Ref OperatingSystemFamily
  LogGroup:
    Type: 'AWS::Logs::LogGroup'
    Properties:
      RetentionInDays: !Ref LogsRetentionInDays
  SecurityGroup:
    Condition: HasNotTargetModule
    Type: 'AWS::EC2::SecurityGroup'
    Properties:
      GroupDescription: !Ref 'AWS::StackName'
      VpcId: {'Fn::ImportValue': !Sub '${VpcModule}-Id'}
  Service:
    Type: 'AWS::ECS::Service'
    Properties:
      CapacityProviderStrategy:
      - Base: 0
        CapacityProvider: !If [HasSpot, FARGATE_SPOT, FARGATE]
        Weight: 1
      Cluster: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
      DeploymentConfiguration:
        MaximumPercent: 200
        MinimumHealthyPercent: 50
        DeploymentCircuitBreaker:
          Enable: true
          Rollback: true
      DesiredCount: !Ref DesiredCount
      HealthCheckGracePeriodSeconds: !If [HasTargetModule, !Ref HealthCheckGracePeriodSeconds, !Ref 'AWS::NoValue']
      LoadBalancers:
      - !If [HasTargetModule, {ContainerName: !If [HasProxyImage, proxy, app], ContainerPort: !If [HasProxyImage, !Ref ProxyPort, !Ref AppPort], TargetGroupArn: {'Fn::ImportValue': !Sub '${TargetModule}-Arn'}}, !Ref 'AWS::NoValue']
      NetworkConfiguration:
        AwsvpcConfiguration:
          AssignPublicIp: !If [HasSubnetsReachPublic, ENABLED, DISABLED]
          SecurityGroups:
          - !If [HasTargetModule, {'Fn::ImportValue': !Sub '${TargetModule}-SecurityGroupId'}, !Ref SecurityGroup]
          - !If [HasClientSgModule1, {'Fn::ImportValue': !Sub '${ClientSgModule1}-SecurityGroupId'}, !Ref 'AWS::NoValue']
          - !If [HasClientSgModule2, {'Fn::ImportValue': !Sub '${ClientSgModule2}-SecurityGroupId'}, !Ref 'AWS::NoValue']
          - !If [HasClientSgModule3, {'Fn::ImportValue': !Sub '${ClientSgModule3}-SecurityGroupId'}, !Ref 'AWS::NoValue']
          Subnets: !Split [',', {'Fn::ImportValue': !Sub '${VpcModule}-SubnetIds${SubnetsReach}'}]
      PlatformVersion: '1.4.0'
      TaskDefinition: !Ref TaskDefinition
      EnableExecuteCommand: !Ref ExecuteCommand
  ServiceFailedNotification:
    Condition: HasAlertingModule
    Type: 'AWS::Events::Rule'
    Properties:
      EventPattern:
        source:
        - 'aws.ecs'
        'detail-type':
        - 'ECS Service Action'
        resources:
        - !Ref Service
        detail:
          eventType:
          - ERROR
          - WARN
      State: ENABLED
      Targets:
      - Arn: {'Fn::ImportValue': !Sub '${AlertingModule}-Arn'}
        Id: rule
  ScalableTargetRole: # based on http://docs.aws.amazon.com/AmazonECS/latest/developerguide/autoscale_IAM_role.html
    Condition: HasAutoScaling
    Type: 'AWS::IAM::Role'
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
        - Effect: Allow
          Principal:
            Service: 'application-autoscaling.amazonaws.com'
          Action: 'sts:AssumeRole'
      Policies:
      - PolicyName: AmazonEC2ContainerServiceAutoscaleRole
        PolicyDocument:
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Action:
            - 'ecs:DescribeServices'
            - 'ecs:UpdateService'
            Resource: '*'
      - PolicyName: cloudwatch
        PolicyDocument:
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Action:
            - 'cloudwatch:DescribeAlarms'
            Resource: '*'
  ScalableTarget:
    Condition: HasAutoScaling
    Type: 'AWS::ApplicationAutoScaling::ScalableTarget'
    Properties:
      MaxCapacity: !Ref MaxCapacity
      MinCapacity: !Ref MinCapacity
      ResourceId: !Sub
      - 'service/${Cluster}/${Service}'
      - Cluster: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
        Service: !GetAtt 'Service.Name'
      RoleARN: !GetAtt 'ScalableTargetRole.Arn'
      ScalableDimension: 'ecs:service:DesiredCount'
      ServiceNamespace: ecs
  ScaleUpPolicy:
    Condition: HasAutoScaling
    Type: 'AWS::ApplicationAutoScaling::ScalingPolicy'
    Properties:
      PolicyName: !Sub '${AWS::StackName}-scale-up'
      PolicyType: StepScaling
      ScalingTargetId: !Ref ScalableTarget
      StepScalingPolicyConfiguration:
        AdjustmentType: PercentChangeInCapacity
        Cooldown: 300
        MinAdjustmentMagnitude: 1
        StepAdjustments:
        - MetricIntervalLowerBound: 0
          ScalingAdjustment: 25
  ScaleDownPolicy:
    Condition: HasAutoScaling
    Type: 'AWS::ApplicationAutoScaling::ScalingPolicy'
    Properties:
      PolicyName: !Sub '${AWS::StackName}-scale-down'
      PolicyType: StepScaling
      ScalingTargetId: !Ref ScalableTarget
      StepScalingPolicyConfiguration:
        AdjustmentType: PercentChangeInCapacity
        Cooldown: 300
        MinAdjustmentMagnitude: 1
        StepAdjustments:
        - MetricIntervalUpperBound: 0
          ScalingAdjustment: -25
  CPUUtilizationTooHighAlarm:
    Condition: HasAlertingModule
    Type: 'AWS::CloudWatch::Alarm'
    Properties:
      AlarmDescription: 'Average CPU utilization over last 10 minutes higher than 80%'
      Namespace: 'AWS/ECS'
      Dimensions:
      - Name: ClusterName
        Value: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
      - Name: ServiceName
        Value: !GetAtt 'Service.Name'
      MetricName: CPUUtilization
      ComparisonOperator: GreaterThanThreshold
      Statistic: Average
      Period: 300
      EvaluationPeriods: 1
      Threshold: 80
      AlarmActions:
      - {'Fn::ImportValue': !Sub '${AlertingModule}-Arn'}
  CPUUtilizationHighAlarm:
    Condition: HasAutoScaling
    Type: 'AWS::CloudWatch::Alarm'
    Properties:
      AlarmDescription: 'Service is running out of CPU'
      Namespace: 'AWS/ECS'
      Dimensions:
      - Name: ClusterName
        Value: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
      - Name: ServiceName
        Value: !GetAtt 'Service.Name'
      MetricName: CPUUtilization
      ComparisonOperator: GreaterThanThreshold
      Statistic: Average
      Period: 300
      EvaluationPeriods: 1
      Threshold: 60
      AlarmActions:
      - !Ref ScaleUpPolicy
  CPUUtilizationLowAlarm:
    Condition: HasAutoScaling
    Type: 'AWS::CloudWatch::Alarm'
    Properties:
      AlarmDescription: 'Service is wasting CPU'
      Namespace: 'AWS/ECS'
      Dimensions:
      - Name: ClusterName
        Value: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
      - Name: ServiceName
        Value: !GetAtt 'Service.Name'
      MetricName: CPUUtilization
      ComparisonOperator: LessThanThreshold
      Statistic: Average
      Period: 300
      EvaluationPeriods: 3
      Threshold: 30
      AlarmActions:
      - !Ref ScaleDownPolicy
Outputs:
  ModuleId:
    Value: 'fargate-service'
  ModuleVersion:
    Value: '2.15.1'
  StackName:
    Value: !Ref 'AWS::StackName'
  TaskRoleArn:
    Value: !GetAtt 'TaskRole.Arn'
    Export:
      Name: !Sub '${AWS::StackName}-TaskRoleArn'
  ServiceName:
    Value: !GetAtt 'Service.Name'
    Export:
      Name: !Sub '${AWS::StackName}-ServiceName'
  ClusterName:
    Value: !If [HasClusterModule, {'Fn::ImportValue': !Sub '${ClusterModule}-Name'}, !Ref Cluster]
    Export:
      Name: !Sub '${AWS::StackName}-ClusterName'
  LogGroupName:
    Value: !Ref LogGroup
    Export:
      Name: !Sub '${AWS::StackName}-LogGroupName'