Releases: rearc/terraform-aws-ecs-task
Use more secure SSL policy by default
This release introduces a new variable ssl_policy which lets you choose a security policy instead of being forced on the least secure one. The default security policy was also updated to force TLS 1.2, so this could break some workflows relying on older protocols or insecure ciphers, unless you set the new variable to the old default policy.
List of security policies documented here:
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html
Security scan finding that led to this change:
https://tfsec.dev/docs/aws/AWS010/
Add support for internal ALB
Add support for internal ALB as opposed to internet-facing. As this will get private IPs from within the VPC it will only be routable by services that can reach private IPs in the VPC it is running on.
Support custom ports on ALB
Add support for custom ports (other than 443 on ALB and 3000 on container), custom ingress cidr blocks (other than 0.0.0.0/0), and custom health check paths (other than /).
Add support for tasks and services without load balancer
Add support for tasks and services without load balancer
Add optional resources
Add optional resources
Remove extra quote
Remove extra quote
Add task role support
Add task role support
Initial release
Module that creates an ECS task definition.