ECSservice.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Description": "Builds an ECS task on a cluster from a separate stack",
    "Parameters": {
      "OwningStackName": {
      "Description": "Name of an active CloudFormation stack that contains the VPC setup that will be used by this stack",
      "Type": "String",
      "MinLength" : 1,
      "MaxLength" : 255,
      "AllowedPattern" : "^[a-zA-Z][-a-zA-Z0-9]*$",
      "Default" : "LizStandard2"
        },
      "ImageTag": {
          "Type": "String",
          "Description": "The version of the image tag",
          "Default": "BUILD_NUMBER"
      },
      "StandardVPC": {
          "Type": "String",
          "Description" : "where the cluster is deployed",
          "Default": "LizStandard2"
      },
      "DesiredCount": {
          "Type": "Number",
          "Description" : "Number of instances deployed",
          "Default": "1"
      }
    },
    "Resources": {
      "EcsService": {
        "Type": "AWS::ECS::Service",
        "Properties": {
          "Cluster": {
            "Fn::ImportValue" : {"Fn::Sub": "${OwningStackName}-Cluster"
                  }
                },
          "TaskDefinition": {
                    "Ref": "PhpTaskDefinition"
              },
          "Role": {
              "Ref": "ServiceRole"
            },
            "DesiredCount": 1,
            "DeploymentConfiguration": {
            "MaximumPercent": 200,
            "MinimumHealthyPercent": 100
          },
        "LoadBalancers": [
            {
                "ContainerName": "php-simple-app",
                "ContainerPort": "80",
                "LoadBalancerName": {
                    "Fn::ImportValue" : {
                      "Fn::Sub": "${OwningStackName}-PublicELB" }
                }
            }
        ]
      }
    },
      "ServiceRole": {
          "Type": "AWS::IAM::Role",
          "Properties": {
              "RoleName": {
                  "Fn::Sub": "ecs-service-${AWS::StackName}"
              },
          "AssumeRolePolicyDocument": {
             "Version" : "2012-10-17",
             "Statement": [ {
                "Effect": "Allow",
                "Principal": {
                   "Service": [ "ecs.amazonaws.com" ]
                },
                "Action": [ "sts:AssumeRole" ]
             } ]
          },
            "Path": "/",
            "Policies": [
                  {
                      "PolicyName": {
                          "Fn::Sub": "ecs-service-${AWS::StackName}"
                      },
                      "PolicyDocument": {
                          "Version": "2012-10-17",
                          "Statement": [
                              {
                                  "Effect": "Allow",
                                  "Action": [
                                      "ec2:AuthorizeSecurityGroupIngress",
                                      "ec2:Describe*",
                                      "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
                                      "elasticloadbalancing:Describe*",
                                      "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
                                      "elasticloadbalancing:DeregisterTargets",
                                      "elasticloadbalancing:DescribeTargetGroups",
                                      "elasticloadbalancing:DescribeTargetHealth",
                                      "elasticloadbalancing:RegisterTargets"
                                  ],
                                  "Resource": "*"
                              }
                          ]
                      }
                    }
                  ]
                }
          },
      "PhpTaskDefinition": {
        "Type": "AWS::ECS::TaskDefinition",
          "Properties": {
            "ContainerDefinitions": [
              {
                "Name": "php-simple-app",
                "Cpu": "10",
                "Essential": "true",
                "Image": {
                    "Fn::Join": [
                        "",
                        [
                            {
                                "Ref": "AWS::AccountId"
                            },
                            ".dkr.ecr.eu-west-1.amazonaws.com/",
                            {
                                "Fn::ImportValue" : {
                                    "Fn::Sub": "${OwningStackName}-Repo"
                                  }
                            },
                            ":",
                            {
                                "Ref": "ImageTag"
                            }
                        ]
                    ]
                },
                "Memory": "300",
                "PortMappings": [
                    {
                        "HostPort": 80,
                        "ContainerPort": 80
                    }
                ]
            }
          ],
          "Volumes": [
            {
                "Name": "my-vol"
            }
        ]
          }
        }
      }
}