@btc-embedded/cdk-extensions 0.22.4 → 0.22.6

package/API.md

@@ -7752,322 +7752,1044 @@ Additional table options to overwrite the defaults for the created table.
 
 ---
 
-### ApplicationLoadBalancerExtensionProps <a name="ApplicationLoadBalancerExtensionProps" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps"></a>
+### ApplicationContainerProps <a name="ApplicationContainerProps" id="@btc-embedded/cdk-extensions.ApplicationContainerProps"></a>
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.Initializer"></a>
+Properties for ApplicationContainer. All properties from EnhancedContainerProps are supported.
+
+**Required properties:**
+- cpu: How much CPU the container requires
+- memoryMiB: How much memory in megabytes the container requires
+- image: The image to run
+- trafficPort: What port the image listens for traffic on
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.Initializer"></a>
 
 ```typescript
-import { ApplicationLoadBalancerExtensionProps } from '@btc-embedded/cdk-extensions'
+import { ApplicationContainerProps } from '@btc-embedded/cdk-extensions'
 
-const applicationLoadBalancerExtensionProps: ApplicationLoadBalancerExtensionProps = { ... }
+const applicationContainerProps: ApplicationContainerProps = { ... }
 ```
 
 #### Properties <a name="Properties" id="Properties"></a>
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.clientScope">clientScope</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.userPoolClientSecret">userPoolClientSecret</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.healtCheckPath">healtCheckPath</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.listener">listener</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.path">path</a></code> | <code>string</code> | *No description.* |
-
----
-
-##### `clientScope`<sup>Required</sup> <a name="clientScope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.clientScope"></a>
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.image">image</a></code> | <code>aws-cdk-lib.aws_ecs.ContainerImage</code> | The image used to start a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.command">command</a></code> | <code>string[]</code> | The command that is passed to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.containerName">containerName</a></code> | <code>string</code> | The name of the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.cpu">cpu</a></code> | <code>number</code> | The minimum number of CPU units to reserve for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.credentialSpecs">credentialSpecs</a></code> | <code>aws-cdk-lib.aws_ecs.CredentialSpec[]</code> | A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.disableNetworking">disableNetworking</a></code> | <code>boolean</code> | Specifies whether networking is disabled within the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dnsSearchDomains">dnsSearchDomains</a></code> | <code>string[]</code> | A list of DNS search domains that are presented to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dnsServers">dnsServers</a></code> | <code>string[]</code> | A list of DNS servers that are presented to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dockerLabels">dockerLabels</a></code> | <code>{[ key: string ]: string}</code> | A key/value map of labels to add to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dockerSecurityOptions">dockerSecurityOptions</a></code> | <code>string[]</code> | A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.enableRestartPolicy">enableRestartPolicy</a></code> | <code>boolean</code> | Enable a restart policy for a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.entryPoint">entryPoint</a></code> | <code>string[]</code> | The ENTRYPOINT value to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.environment">environment</a></code> | <code>{[ key: string ]: string}</code> | The environment variables to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.environmentFiles">environmentFiles</a></code> | <code>aws-cdk-lib.aws_ecs.EnvironmentFile[]</code> | The environment files to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.essential">essential</a></code> | <code>boolean</code> | Specifies whether the container is marked essential. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.extraHosts">extraHosts</a></code> | <code>{[ key: string ]: string}</code> | A list of hostnames and IP address mappings to append to the /etc/hosts file on the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.gpuCount">gpuCount</a></code> | <code>number</code> | The number of GPUs assigned to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.healthCheck">healthCheck</a></code> | <code>aws-cdk-lib.aws_ecs.HealthCheck</code> | The health check command and associated configuration parameters for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.hostname">hostname</a></code> | <code>string</code> | The hostname to use for your container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.inferenceAcceleratorResources">inferenceAcceleratorResources</a></code> | <code>string[]</code> | The inference accelerators referenced by the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.interactive">interactive</a></code> | <code>boolean</code> | When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.linuxParameters">linuxParameters</a></code> | <code>aws-cdk-lib.aws_ecs.LinuxParameters</code> | Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.logging">logging</a></code> | <code>aws-cdk-lib.aws_ecs.LogDriver</code> | The log configuration specification for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryLimitMiB">memoryLimitMiB</a></code> | <code>number</code> | The amount (in MiB) of memory to present to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryReservationMiB">memoryReservationMiB</a></code> | <code>number</code> | The soft limit (in MiB) of memory to reserve for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.portMappings">portMappings</a></code> | <code>aws-cdk-lib.aws_ecs.PortMapping[]</code> | The port mappings to add to the container definition. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.privileged">privileged</a></code> | <code>boolean</code> | Specifies whether the container is marked as privileged. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.pseudoTerminal">pseudoTerminal</a></code> | <code>boolean</code> | When this parameter is true, a TTY is allocated. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.readonlyRootFilesystem">readonlyRootFilesystem</a></code> | <code>boolean</code> | When this parameter is true, the container is given read-only access to its root file system. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.restartAttemptPeriod">restartAttemptPeriod</a></code> | <code>aws-cdk-lib.Duration</code> | A period of time that the container must run for before a restart can be attempted. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.restartIgnoredExitCodes">restartIgnoredExitCodes</a></code> | <code>number[]</code> | A list of exit codes that Amazon ECS will ignore and not attempt a restart on. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.secrets">secrets</a></code> | <code>{[ key: string ]: aws-cdk-lib.aws_ecs.Secret}</code> | The secret environment variables to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.startTimeout">startTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before giving up on resolving dependencies for a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.stopTimeout">stopTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.systemControls">systemControls</a></code> | <code>aws-cdk-lib.aws_ecs.SystemControl[]</code> | A list of namespaced kernel parameters to set in the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.ulimits">ulimits</a></code> | <code>aws-cdk-lib.aws_ecs.Ulimit[]</code> | An array of ulimits to set in the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.user">user</a></code> | <code>string</code> | The user to use inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.versionConsistency">versionConsistency</a></code> | <code>aws-cdk-lib.aws_ecs.VersionConsistency</code> | Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory in which to run commands inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.containerDependencies">containerDependencies</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]</code> | Container dependencies (used by ExtraContainerExtension). |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.healthCheckEndpoint">healthCheckEndpoint</a></code> | <code>string</code> | Simplified health check - just specify the HTTP endpoint path. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | The log group into which application container logs should be routed. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryMiB">memoryMiB</a></code> | <code>number</code> | How much memory in megabytes the container requires. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps.property.trafficPort">trafficPort</a></code> | <code>number</code> | What port the image listens for traffic on. |
+
+---
+
+##### `image`<sup>Required</sup> <a name="image" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.image"></a>
 
 ```typescript
-public readonly clientScope: string;
+public readonly image: ContainerImage;
 ```
 
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_ecs.ContainerImage
+
+The image used to start a container.
+
+This string is passed directly to the Docker daemon.
+Images in the Docker Hub registry are available by default.
+Other repositories are specified with either repository-url/image:tag or repository-url/image@digest.
+TODO: Update these to specify using classes of IContainerImage
 
 ---
 
-##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.securityGroupId"></a>
+##### `command`<sup>Optional</sup> <a name="command" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.command"></a>
 
 ```typescript
-public readonly securityGroupId: string;
+public readonly command: string[];
 ```
 
-- *Type:* string
+- *Type:* string[]
+- *Default:* CMD value built into container image.
+
+The command that is passed to the container.
+
+If you provide a shell command as a single string, you have to quote command-line arguments.
 
 ---
 
-##### `userPoolClientSecret`<sup>Required</sup> <a name="userPoolClientSecret" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.userPoolClientSecret"></a>
+##### `containerName`<sup>Optional</sup> <a name="containerName" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.containerName"></a>
 
 ```typescript
-public readonly userPoolClientSecret: string;
+public readonly containerName: string;
 ```
 
 - *Type:* string
+- *Default:* id of node associated with ContainerDefinition.
+
+The name of the container.
 
 ---
 
-##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.basePlatformStackName"></a>
+##### `cpu`<sup>Optional</sup> <a name="cpu" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.cpu"></a>
 
 ```typescript
-public readonly basePlatformStackName: string;
+public readonly cpu: number;
 ```
 
-- *Type:* string
+- *Type:* number
+- *Default:* No minimum CPU units reserved.
+
+The minimum number of CPU units to reserve for the container.
 
 ---
 
-##### `healtCheckPath`<sup>Optional</sup> <a name="healtCheckPath" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.healtCheckPath"></a>
+##### `credentialSpecs`<sup>Optional</sup> <a name="credentialSpecs" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.credentialSpecs"></a>
 
 ```typescript
-public readonly healtCheckPath: string;
+public readonly credentialSpecs: CredentialSpec[];
 ```
 
-- *Type:* string
-
----
+- *Type:* aws-cdk-lib.aws_ecs.CredentialSpec[]
+- *Default:* No credential specs.
 
-##### `listener`<sup>Optional</sup> <a name="listener" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.listener"></a>
+A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication.
 
-```typescript
-public readonly listener: IApplicationListener;
-```
+We recommend that you use this parameter instead of the `dockerSecurityOptions`.
 
-- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener
+Currently, only one credential spec is allowed per container definition.
 
 ---
 
-##### `path`<sup>Optional</sup> <a name="path" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.path"></a>
+##### `disableNetworking`<sup>Optional</sup> <a name="disableNetworking" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.disableNetworking"></a>
 
 ```typescript
-public readonly path: string;
+public readonly disableNetworking: boolean;
 ```
 
-- *Type:* string
+- *Type:* boolean
+- *Default:* false
 
----
+Specifies whether networking is disabled within the container.
 
-### ApplicationLoadBalancerExtensionPropsV2 <a name="ApplicationLoadBalancerExtensionPropsV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2"></a>
+When this parameter is true, networking is disabled within the container.
 
-Properties for the ApplicationLoadBalancerExtensionV2.
+---
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.Initializer"></a>
+##### `dnsSearchDomains`<sup>Optional</sup> <a name="dnsSearchDomains" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dnsSearchDomains"></a>
 
 ```typescript
-import { ApplicationLoadBalancerExtensionPropsV2 } from '@btc-embedded/cdk-extensions'
-
-const applicationLoadBalancerExtensionPropsV2: ApplicationLoadBalancerExtensionPropsV2 = { ... }
+public readonly dnsSearchDomains: string[];
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* string[]
+- *Default:* No search domains.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the platform stack to use for the load balancer. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.loadBalancer">loadBalancer</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2">ApplicationLoadBalancerV2</a></code> | The Application Load Balancer to use. |
+A list of DNS search domains that are presented to the container.
 
 ---
 
-##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.basePlatformStackName"></a>
+##### `dnsServers`<sup>Optional</sup> <a name="dnsServers" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dnsServers"></a>
 
 ```typescript
-public readonly basePlatformStackName: string;
+public readonly dnsServers: string[];
 ```
 
-- *Type:* string
-
-The name of the platform stack to use for the load balancer.
+- *Type:* string[]
+- *Default:* Default DNS servers.
 
-Either this or `loadBalancer` must be provided.
+A list of DNS servers that are presented to the container.
 
 ---
 
-##### `loadBalancer`<sup>Optional</sup> <a name="loadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.loadBalancer"></a>
+##### `dockerLabels`<sup>Optional</sup> <a name="dockerLabels" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dockerLabels"></a>
 
 ```typescript
-public readonly loadBalancer: ApplicationLoadBalancerV2;
+public readonly dockerLabels: {[ key: string ]: string};
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2">ApplicationLoadBalancerV2</a>
-
-The Application Load Balancer to use.
+- *Type:* {[ key: string ]: string}
+- *Default:* No labels.
 
-Either this or `platformStackName` must be provided.
+A key/value map of labels to add to the container.
 
 ---
 
-### ApplicationLoadBalancerProps <a name="ApplicationLoadBalancerProps" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps"></a>
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.Initializer"></a>
+##### `dockerSecurityOptions`<sup>Optional</sup> <a name="dockerSecurityOptions" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.dockerSecurityOptions"></a>
 
 ```typescript
-import { ApplicationLoadBalancerProps } from '@btc-embedded/cdk-extensions'
-
-const applicationLoadBalancerProps: ApplicationLoadBalancerProps = { ... }
+public readonly dockerSecurityOptions: string[];
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* string[]
+- *Default:* No security labels.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.fqdn">fqdn</a></code> | <code>string</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolClient">userPoolClient</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolClient</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolDomain">userPoolDomain</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolDomain</code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems.
 
 ---
 
-##### `fqdn`<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.fqdn"></a>
+##### `enableRestartPolicy`<sup>Optional</sup> <a name="enableRestartPolicy" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.enableRestartPolicy"></a>
 
 ```typescript
-public readonly fqdn: string;
+public readonly enableRestartPolicy: boolean;
 ```
 
-- *Type:* string
-
----
+- *Type:* boolean
+- *Default:* false unless `restartIgnoredExitCodes` or `restartAttemptPeriod` is set.
 
-##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.hostedZone"></a>
+Enable a restart policy for a container.
 
-```typescript
-public readonly hostedZone: IHostedZone;
-```
+When you set up a restart policy, Amazon ECS can restart the container without needing to replace the task.
 
-- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html)
 
 ---
 
-##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPool"></a>
+##### `entryPoint`<sup>Optional</sup> <a name="entryPoint" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.entryPoint"></a>
 
 ```typescript
-public readonly userPool: IUserPool;
+public readonly entryPoint: string[];
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+- *Type:* string[]
+- *Default:* Entry point configured in container.
+
+The ENTRYPOINT value to pass to the container.
+
+> [https://docs.docker.com/engine/reference/builder/#entrypoint](https://docs.docker.com/engine/reference/builder/#entrypoint)
 
 ---
 
-##### `userPoolClient`<sup>Required</sup> <a name="userPoolClient" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolClient"></a>
+##### `environment`<sup>Optional</sup> <a name="environment" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.environment"></a>
 
 ```typescript
-public readonly userPoolClient: IUserPoolClient;
+public readonly environment: {[ key: string ]: string};
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.IUserPoolClient
+- *Type:* {[ key: string ]: string}
+- *Default:* No environment variables.
+
+The environment variables to pass to the container.
 
 ---
 
-##### `userPoolDomain`<sup>Required</sup> <a name="userPoolDomain" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolDomain"></a>
+##### `environmentFiles`<sup>Optional</sup> <a name="environmentFiles" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.environmentFiles"></a>
 
 ```typescript
-public readonly userPoolDomain: IUserPoolDomain;
+public readonly environmentFiles: EnvironmentFile[];
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.IUserPoolDomain
+- *Type:* aws-cdk-lib.aws_ecs.EnvironmentFile[]
+- *Default:* No environment files.
+
+The environment files to pass to the container.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html)
 
 ---
 
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.vpc"></a>
+##### `essential`<sup>Optional</sup> <a name="essential" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.essential"></a>
 
 ```typescript
-public readonly vpc: IVpc;
+public readonly essential: boolean;
 ```
 
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* boolean
+- *Default:* true
 
----
+Specifies whether the container is marked essential.
 
-### ApplicationLoadBalancerPropsV2 <a name="ApplicationLoadBalancerPropsV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2"></a>
+If the essential parameter of a container is marked as true, and that container fails
+or stops for any reason, all other containers that are part of the task are stopped.
+If the essential parameter of a container is marked as false, then its failure does not
+affect the rest of the containers in a task. All tasks must have at least one essential container.
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.Initializer"></a>
+If this parameter is omitted, a container is assumed to be essential.
 
-```typescript
-import { ApplicationLoadBalancerPropsV2 } from '@btc-embedded/cdk-extensions'
+---
 
-const applicationLoadBalancerPropsV2: ApplicationLoadBalancerPropsV2 = { ... }
+##### `extraHosts`<sup>Optional</sup> <a name="extraHosts" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.extraHosts"></a>
+
+```typescript
+public readonly extraHosts: {[ key: string ]: string};
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* {[ key: string ]: string}
+- *Default:* No extra hosts.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.healtCheckPath">healtCheckPath</a></code> | <code>string</code> | The health check path for the target group. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | The Route 53 hosted zone where the ALB's DNS record will be created. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.trafficPort">trafficPort</a></code> | <code>number</code> | The port on which the target group will receive traffic. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.userPool">userPool</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ICognitoUserPool">ICognitoUserPool</a></code> | The Cognito User Pool of this base platform. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC in which the Application Load Balancer will be deployed. |
-| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.recordName">recordName</a></code> | <code>string</code> | The domain prefix or record name for configuring the ALB domain. |
+A list of hostnames and IP address mappings to append to the /etc/hosts file on the container.
 
 ---
 
-##### `healtCheckPath`<sup>Required</sup> <a name="healtCheckPath" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.healtCheckPath"></a>
+##### `gpuCount`<sup>Optional</sup> <a name="gpuCount" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.gpuCount"></a>
 
 ```typescript
-public readonly healtCheckPath: string;
+public readonly gpuCount: number;
 ```
 
-- *Type:* string
+- *Type:* number
+- *Default:* No GPUs assigned.
 
-The health check path for the target group.
+The number of GPUs assigned to the container.
 
 ---
 
-##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.hostedZone"></a>
+##### `healthCheck`<sup>Optional</sup> <a name="healthCheck" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.healthCheck"></a>
 
 ```typescript
-public readonly hostedZone: IHostedZone;
+public readonly healthCheck: HealthCheck;
 ```
 
-- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+- *Type:* aws-cdk-lib.aws_ecs.HealthCheck
+- *Default:* Health check configuration from container.
 
-The Route 53 hosted zone where the ALB's DNS record will be created.
+The health check command and associated configuration parameters for the container.
 
 ---
 
-##### `trafficPort`<sup>Required</sup> <a name="trafficPort" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.trafficPort"></a>
+##### `hostname`<sup>Optional</sup> <a name="hostname" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.hostname"></a>
 
 ```typescript
-public readonly trafficPort: number;
+public readonly hostname: string;
 ```
 
-- *Type:* number
+- *Type:* string
+- *Default:* Automatic hostname.
 
-The port on which the target group will receive traffic.
+The hostname to use for your container.
 
 ---
 
-##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.userPool"></a>
+##### `inferenceAcceleratorResources`<sup>Optional</sup> <a name="inferenceAcceleratorResources" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.inferenceAcceleratorResources"></a>
 
 ```typescript
-public readonly userPool: ICognitoUserPool;
+public readonly inferenceAcceleratorResources: string[];
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ICognitoUserPool">ICognitoUserPool</a>
+- *Type:* string[]
+- *Default:* No inference accelerators assigned.
 
-The Cognito User Pool of this base platform.
+The inference accelerators referenced by the container.
 
 ---
 
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.vpc"></a>
+##### `interactive`<sup>Optional</sup> <a name="interactive" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.interactive"></a>
 
 ```typescript
-public readonly vpc: IVpc;
+public readonly interactive: boolean;
 ```
 
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* boolean
+- *Default:* false
 
-The VPC in which the Application Load Balancer will be deployed.
+When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive)
 
 ---
 
-##### `recordName`<sup>Optional</sup> <a name="recordName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.recordName"></a>
+##### `linuxParameters`<sup>Optional</sup> <a name="linuxParameters" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.linuxParameters"></a>
 
 ```typescript
-public readonly recordName: string;
+public readonly linuxParameters: LinuxParameters;
 ```
 
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_ecs.LinuxParameters
+- *Default:* No Linux parameters.
+
+Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
+
+For more information see [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html).
+
+---
+
+##### `logging`<sup>Optional</sup> <a name="logging" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.logging"></a>
+
+```typescript
+public readonly logging: LogDriver;
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.LogDriver
+- *Default:* Containers use the same logging driver that the Docker daemon uses.
+
+The log configuration specification for the container.
+
+---
+
+##### `memoryLimitMiB`<sup>Optional</sup> <a name="memoryLimitMiB" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryLimitMiB"></a>
+
+```typescript
+public readonly memoryLimitMiB: number;
+```
+
+- *Type:* number
+- *Default:* No memory limit.
+
+The amount (in MiB) of memory to present to the container.
+
+If your container attempts to exceed the allocated memory, the container
+is terminated.
+
+At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
+
+---
+
+##### `memoryReservationMiB`<sup>Optional</sup> <a name="memoryReservationMiB" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryReservationMiB"></a>
+
+```typescript
+public readonly memoryReservationMiB: number;
+```
+
+- *Type:* number
+- *Default:* No memory reserved.
+
+The soft limit (in MiB) of memory to reserve for the container.
+
+When system memory is under heavy contention, Docker attempts to keep the
+container memory to this soft limit. However, your container can consume more
+memory when it needs to, up to either the hard limit specified with the memory
+parameter (if applicable), or all of the available memory on the container
+instance, whichever comes first.
+
+At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
+
+---
+
+##### `portMappings`<sup>Optional</sup> <a name="portMappings" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.portMappings"></a>
+
+```typescript
+public readonly portMappings: PortMapping[];
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.PortMapping[]
+- *Default:* No ports are mapped.
+
+The port mappings to add to the container definition.
+
+---
+
+##### `privileged`<sup>Optional</sup> <a name="privileged" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.privileged"></a>
+
+```typescript
+public readonly privileged: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+Specifies whether the container is marked as privileged.
+
+When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user).
+
+---
+
+##### `pseudoTerminal`<sup>Optional</sup> <a name="pseudoTerminal" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.pseudoTerminal"></a>
+
+```typescript
+public readonly pseudoTerminal: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+When this parameter is true, a TTY is allocated.
+
+This parameter maps to Tty in the "Create a container section" of the
+Docker Remote API and the --tty option to `docker run`.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal)
+
+---
+
+##### `readonlyRootFilesystem`<sup>Optional</sup> <a name="readonlyRootFilesystem" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.readonlyRootFilesystem"></a>
+
+```typescript
+public readonly readonlyRootFilesystem: boolean;
+```
+
+- *Type:* boolean
+- *Default:* false
+
+When this parameter is true, the container is given read-only access to its root file system.
+
+---
+
+##### `restartAttemptPeriod`<sup>Optional</sup> <a name="restartAttemptPeriod" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.restartAttemptPeriod"></a>
+
+```typescript
+public readonly restartAttemptPeriod: Duration;
+```
+
+- *Type:* aws-cdk-lib.Duration
+- *Default:* Duration.seconds(300) if `enableRestartPolicy` is true, otherwise no period.
+
+A period of time that the container must run for before a restart can be attempted.
+
+A container can be restarted only once every `restartAttemptPeriod` seconds.
+If a container isn't able to run for this time period and exits early, it will not be restarted.
+
+This property can't be used if `enableRestartPolicy` is set to false.
+
+You can set a minimum `restartAttemptPeriod` of 60 seconds and a maximum `restartAttemptPeriod`
+of 1800 seconds.
+
+---
+
+##### `restartIgnoredExitCodes`<sup>Optional</sup> <a name="restartIgnoredExitCodes" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.restartIgnoredExitCodes"></a>
+
+```typescript
+public readonly restartIgnoredExitCodes: number[];
+```
+
+- *Type:* number[]
+- *Default:* No exit codes are ignored.
+
+A list of exit codes that Amazon ECS will ignore and not attempt a restart on.
+
+This property can't be used if `enableRestartPolicy` is set to false.
+
+You can specify a maximum of 50 container exit codes.
+
+---
+
+##### `secrets`<sup>Optional</sup> <a name="secrets" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.secrets"></a>
+
+```typescript
+public readonly secrets: {[ key: string ]: Secret};
+```
+
+- *Type:* {[ key: string ]: aws-cdk-lib.aws_ecs.Secret}
+- *Default:* No secret environment variables.
+
+The secret environment variables to pass to the container.
+
+---
+
+##### `startTimeout`<sup>Optional</sup> <a name="startTimeout" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.startTimeout"></a>
+
+```typescript
+public readonly startTimeout: Duration;
+```
+
+- *Type:* aws-cdk-lib.Duration
+- *Default:* none
+
+Time duration (in seconds) to wait before giving up on resolving dependencies for a container.
+
+---
+
+##### `stopTimeout`<sup>Optional</sup> <a name="stopTimeout" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.stopTimeout"></a>
+
+```typescript
+public readonly stopTimeout: Duration;
+```
+
+- *Type:* aws-cdk-lib.Duration
+- *Default:* none
+
+Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own.
+
+---
+
+##### `systemControls`<sup>Optional</sup> <a name="systemControls" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.systemControls"></a>
+
+```typescript
+public readonly systemControls: SystemControl[];
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.SystemControl[]
+- *Default:* No system controls are set.
+
+A list of namespaced kernel parameters to set in the container.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols)
+
+---
+
+##### `ulimits`<sup>Optional</sup> <a name="ulimits" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.ulimits"></a>
+
+```typescript
+public readonly ulimits: Ulimit[];
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.Ulimit[]
+
+An array of ulimits to set in the container.
+
+---
+
+##### `user`<sup>Optional</sup> <a name="user" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.user"></a>
+
+```typescript
+public readonly user: string;
+```
+
+- *Type:* string
+- *Default:* root
+
+The user to use inside the container.
+
+This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user)
+
+---
+
+##### `versionConsistency`<sup>Optional</sup> <a name="versionConsistency" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.versionConsistency"></a>
+
+```typescript
+public readonly versionConsistency: VersionConsistency;
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.VersionConsistency
+- *Default:* VersionConsistency.DISABLED if `image` is a CDK asset, VersionConsistency.ENABLED otherwise
+
+Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest.
+
+If you set the value for a container as disabled, Amazon ECS will
+not resolve the provided container image tag to a digest and will use the
+original image URI specified in the container definition for deployment.
+
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency)
+
+---
+
+##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.workingDirectory"></a>
+
+```typescript
+public readonly workingDirectory: string;
+```
+
+- *Type:* string
+- *Default:* /
+
+The working directory in which to run commands inside the container.
+
+---
+
+##### `containerDependencies`<sup>Optional</sup> <a name="containerDependencies" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.containerDependencies"></a>
+
+```typescript
+public readonly containerDependencies: ContainerDependency[];
+```
+
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]
+
+Container dependencies (used by ExtraContainerExtension).
+
+Specify additional container dependencies which should be added after the
+container has been created in the task definition.
+
+---
+
+##### `healthCheckEndpoint`<sup>Optional</sup> <a name="healthCheckEndpoint" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.healthCheckEndpoint"></a>
+
+```typescript
+public readonly healthCheckEndpoint: string;
+```
+
+- *Type:* string
+- *Default:* no health check
+
+Simplified health check - just specify the HTTP endpoint path.
+
+A curl-based health check will be auto-generated using the container's traffic port.
+
+Example: "/health" becomes:
+  curl -f http://localhost:3000/health || exit 1
+
+Cannot be used with `healthCheck`.
+
+---
+
+##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.logGroup"></a>
+
+```typescript
+public readonly logGroup: ILogGroup;
+```
+
+- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+- *Default:* A log group is automatically created for you if the `ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER` feature flag is set.
+
+The log group into which application container logs should be routed.
+
+---
+
+##### `memoryMiB`<sup>Optional</sup> <a name="memoryMiB" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.memoryMiB"></a>
+
+```typescript
+public readonly memoryMiB: number;
+```
+
+- *Type:* number
+
+How much memory in megabytes the container requires.
+
+---
+
+##### `trafficPort`<sup>Optional</sup> <a name="trafficPort" id="@btc-embedded/cdk-extensions.ApplicationContainerProps.property.trafficPort"></a>
+
+```typescript
+public readonly trafficPort: number;
+```
+
+- *Type:* number
+
+What port the image listens for traffic on.
+
+---
+
+### ApplicationLoadBalancerExtensionProps <a name="ApplicationLoadBalancerExtensionProps" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps"></a>
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.Initializer"></a>
+
+```typescript
+import { ApplicationLoadBalancerExtensionProps } from '@btc-embedded/cdk-extensions'
+
+const applicationLoadBalancerExtensionProps: ApplicationLoadBalancerExtensionProps = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.clientScope">clientScope</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.userPoolClientSecret">userPoolClientSecret</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.healtCheckPath">healtCheckPath</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.listener">listener</a></code> | <code>aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.path">path</a></code> | <code>string</code> | *No description.* |
+
+---
+
+##### `clientScope`<sup>Required</sup> <a name="clientScope" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.clientScope"></a>
+
+```typescript
+public readonly clientScope: string;
+```
+
+- *Type:* string
+
+---
+
+##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.securityGroupId"></a>
+
+```typescript
+public readonly securityGroupId: string;
+```
+
+- *Type:* string
+
+---
+
+##### `userPoolClientSecret`<sup>Required</sup> <a name="userPoolClientSecret" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.userPoolClientSecret"></a>
+
+```typescript
+public readonly userPoolClientSecret: string;
+```
+
+- *Type:* string
+
+---
+
+##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.basePlatformStackName"></a>
+
+```typescript
+public readonly basePlatformStackName: string;
+```
+
+- *Type:* string
+
+---
+
+##### `healtCheckPath`<sup>Optional</sup> <a name="healtCheckPath" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.healtCheckPath"></a>
+
+```typescript
+public readonly healtCheckPath: string;
+```
+
+- *Type:* string
+
+---
+
+##### `listener`<sup>Optional</sup> <a name="listener" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.listener"></a>
+
+```typescript
+public readonly listener: IApplicationListener;
+```
+
+- *Type:* aws-cdk-lib.aws_elasticloadbalancingv2.IApplicationListener
+
+---
+
+##### `path`<sup>Optional</sup> <a name="path" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionProps.property.path"></a>
+
+```typescript
+public readonly path: string;
+```
+
+- *Type:* string
+
+---
+
+### ApplicationLoadBalancerExtensionPropsV2 <a name="ApplicationLoadBalancerExtensionPropsV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2"></a>
+
+Properties for the ApplicationLoadBalancerExtensionV2.
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.Initializer"></a>
+
+```typescript
+import { ApplicationLoadBalancerExtensionPropsV2 } from '@btc-embedded/cdk-extensions'
+
+const applicationLoadBalancerExtensionPropsV2: ApplicationLoadBalancerExtensionPropsV2 = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the platform stack to use for the load balancer. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.loadBalancer">loadBalancer</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2">ApplicationLoadBalancerV2</a></code> | The Application Load Balancer to use. |
+
+---
+
+##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.basePlatformStackName"></a>
+
+```typescript
+public readonly basePlatformStackName: string;
+```
+
+- *Type:* string
+
+The name of the platform stack to use for the load balancer.
+
+Either this or `loadBalancer` must be provided.
+
+---
+
+##### `loadBalancer`<sup>Optional</sup> <a name="loadBalancer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtensionPropsV2.property.loadBalancer"></a>
+
+```typescript
+public readonly loadBalancer: ApplicationLoadBalancerV2;
+```
+
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerV2">ApplicationLoadBalancerV2</a>
+
+The Application Load Balancer to use.
+
+Either this or `platformStackName` must be provided.
+
+---
+
+### ApplicationLoadBalancerProps <a name="ApplicationLoadBalancerProps" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps"></a>
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.Initializer"></a>
+
+```typescript
+import { ApplicationLoadBalancerProps } from '@btc-embedded/cdk-extensions'
+
+const applicationLoadBalancerProps: ApplicationLoadBalancerProps = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.fqdn">fqdn</a></code> | <code>string</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolClient">userPoolClient</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolClient</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolDomain">userPoolDomain</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPoolDomain</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | *No description.* |
+
+---
+
+##### `fqdn`<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.fqdn"></a>
+
+```typescript
+public readonly fqdn: string;
+```
+
+- *Type:* string
+
+---
+
+##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.hostedZone"></a>
+
+```typescript
+public readonly hostedZone: IHostedZone;
+```
+
+- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+
+---
+
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPool"></a>
+
+```typescript
+public readonly userPool: IUserPool;
+```
+
+- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+
+---
+
+##### `userPoolClient`<sup>Required</sup> <a name="userPoolClient" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolClient"></a>
+
+```typescript
+public readonly userPoolClient: IUserPoolClient;
+```
+
+- *Type:* aws-cdk-lib.aws_cognito.IUserPoolClient
+
+---
+
+##### `userPoolDomain`<sup>Required</sup> <a name="userPoolDomain" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.userPoolDomain"></a>
+
+```typescript
+public readonly userPoolDomain: IUserPoolDomain;
+```
+
+- *Type:* aws-cdk-lib.aws_cognito.IUserPoolDomain
+
+---
+
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerProps.property.vpc"></a>
+
+```typescript
+public readonly vpc: IVpc;
+```
+
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+
+---
+
+### ApplicationLoadBalancerPropsV2 <a name="ApplicationLoadBalancerPropsV2" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2"></a>
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.Initializer"></a>
+
+```typescript
+import { ApplicationLoadBalancerPropsV2 } from '@btc-embedded/cdk-extensions'
+
+const applicationLoadBalancerPropsV2: ApplicationLoadBalancerPropsV2 = { ... }
+```
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.healtCheckPath">healtCheckPath</a></code> | <code>string</code> | The health check path for the target group. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.hostedZone">hostedZone</a></code> | <code>aws-cdk-lib.aws_route53.IHostedZone</code> | The Route 53 hosted zone where the ALB's DNS record will be created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.trafficPort">trafficPort</a></code> | <code>number</code> | The port on which the target group will receive traffic. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.userPool">userPool</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ICognitoUserPool">ICognitoUserPool</a></code> | The Cognito User Pool of this base platform. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC in which the Application Load Balancer will be deployed. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.recordName">recordName</a></code> | <code>string</code> | The domain prefix or record name for configuring the ALB domain. |
+
+---
+
+##### `healtCheckPath`<sup>Required</sup> <a name="healtCheckPath" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.healtCheckPath"></a>
+
+```typescript
+public readonly healtCheckPath: string;
+```
+
+- *Type:* string
+
+The health check path for the target group.
+
+---
+
+##### `hostedZone`<sup>Required</sup> <a name="hostedZone" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.hostedZone"></a>
+
+```typescript
+public readonly hostedZone: IHostedZone;
+```
+
+- *Type:* aws-cdk-lib.aws_route53.IHostedZone
+
+The Route 53 hosted zone where the ALB's DNS record will be created.
+
+---
+
+##### `trafficPort`<sup>Required</sup> <a name="trafficPort" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.trafficPort"></a>
+
+```typescript
+public readonly trafficPort: number;
+```
+
+- *Type:* number
+
+The port on which the target group will receive traffic.
+
+---
+
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.userPool"></a>
+
+```typescript
+public readonly userPool: ICognitoUserPool;
+```
+
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ICognitoUserPool">ICognitoUserPool</a>
+
+The Cognito User Pool of this base platform.
+
+---
+
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.vpc"></a>
+
+```typescript
+public readonly vpc: IVpc;
+```
+
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
+
+The VPC in which the Application Load Balancer will be deployed.
+
+---
+
+##### `recordName`<sup>Optional</sup> <a name="recordName" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerPropsV2.property.recordName"></a>
+
+```typescript
+public readonly recordName: string;
+```
+
+- *Type:* string
 - *Default:* zone root
 
 The domain prefix or record name for configuring the ALB domain.
@@ -9484,1368 +10206,1423 @@ ContainerDependencyCondition.SUCCESS and ContainerDependencyCondition.HEALTHY.
 
 ---
 
-### ContainerProps <a name="ContainerProps" id="@btc-embedded/cdk-extensions.ContainerProps"></a>
+### DefaultUserPoolClientsProps <a name="DefaultUserPoolClientsProps" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps"></a>
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.ContainerProps.Initializer"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.Initializer"></a>
 
 ```typescript
-import { ContainerProps } from '@btc-embedded/cdk-extensions'
+import { DefaultUserPoolClientsProps } from '@btc-embedded/cdk-extensions'
 
-const containerProps: ContainerProps = { ... }
+const defaultUserPoolClientsProps: DefaultUserPoolClientsProps = { ... }
 ```
 
 #### Properties <a name="Properties" id="Properties"></a>
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.image">image</a></code> | <code>aws-cdk-lib.aws_ecs.ContainerImage</code> | The image used to start a container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.command">command</a></code> | <code>string[]</code> | The command that is passed to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.containerName">containerName</a></code> | <code>string</code> | The name of the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.cpu">cpu</a></code> | <code>number</code> | The minimum number of CPU units to reserve for the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.credentialSpecs">credentialSpecs</a></code> | <code>aws-cdk-lib.aws_ecs.CredentialSpec[]</code> | A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.disableNetworking">disableNetworking</a></code> | <code>boolean</code> | Specifies whether networking is disabled within the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.dnsSearchDomains">dnsSearchDomains</a></code> | <code>string[]</code> | A list of DNS search domains that are presented to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.dnsServers">dnsServers</a></code> | <code>string[]</code> | A list of DNS servers that are presented to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.dockerLabels">dockerLabels</a></code> | <code>{[ key: string ]: string}</code> | A key/value map of labels to add to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.dockerSecurityOptions">dockerSecurityOptions</a></code> | <code>string[]</code> | A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.enableRestartPolicy">enableRestartPolicy</a></code> | <code>boolean</code> | Enable a restart policy for a container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.entryPoint">entryPoint</a></code> | <code>string[]</code> | The ENTRYPOINT value to pass to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.environment">environment</a></code> | <code>{[ key: string ]: string}</code> | The environment variables to pass to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.environmentFiles">environmentFiles</a></code> | <code>aws-cdk-lib.aws_ecs.EnvironmentFile[]</code> | The environment files to pass to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.essential">essential</a></code> | <code>boolean</code> | Specifies whether the container is marked essential. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.extraHosts">extraHosts</a></code> | <code>{[ key: string ]: string}</code> | A list of hostnames and IP address mappings to append to the /etc/hosts file on the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.gpuCount">gpuCount</a></code> | <code>number</code> | The number of GPUs assigned to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.healthCheck">healthCheck</a></code> | <code>aws-cdk-lib.aws_ecs.HealthCheck</code> | The health check command and associated configuration parameters for the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.hostname">hostname</a></code> | <code>string</code> | The hostname to use for your container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.inferenceAcceleratorResources">inferenceAcceleratorResources</a></code> | <code>string[]</code> | The inference accelerators referenced by the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.interactive">interactive</a></code> | <code>boolean</code> | When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.linuxParameters">linuxParameters</a></code> | <code>aws-cdk-lib.aws_ecs.LinuxParameters</code> | Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.logging">logging</a></code> | <code>aws-cdk-lib.aws_ecs.LogDriver</code> | The log configuration specification for the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.memoryLimitMiB">memoryLimitMiB</a></code> | <code>number</code> | The amount (in MiB) of memory to present to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.memoryReservationMiB">memoryReservationMiB</a></code> | <code>number</code> | The soft limit (in MiB) of memory to reserve for the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.portMappings">portMappings</a></code> | <code>aws-cdk-lib.aws_ecs.PortMapping[]</code> | The port mappings to add to the container definition. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.privileged">privileged</a></code> | <code>boolean</code> | Specifies whether the container is marked as privileged. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.pseudoTerminal">pseudoTerminal</a></code> | <code>boolean</code> | When this parameter is true, a TTY is allocated. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.readonlyRootFilesystem">readonlyRootFilesystem</a></code> | <code>boolean</code> | When this parameter is true, the container is given read-only access to its root file system. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.restartAttemptPeriod">restartAttemptPeriod</a></code> | <code>aws-cdk-lib.Duration</code> | A period of time that the container must run for before a restart can be attempted. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.restartIgnoredExitCodes">restartIgnoredExitCodes</a></code> | <code>number[]</code> | A list of exit codes that Amazon ECS will ignore and not attempt a restart on. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.secrets">secrets</a></code> | <code>{[ key: string ]: aws-cdk-lib.aws_ecs.Secret}</code> | The secret environment variables to pass to the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.startTimeout">startTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before giving up on resolving dependencies for a container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.stopTimeout">stopTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.systemControls">systemControls</a></code> | <code>aws-cdk-lib.aws_ecs.SystemControl[]</code> | A list of namespaced kernel parameters to set in the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.ulimits">ulimits</a></code> | <code>aws-cdk-lib.aws_ecs.Ulimit[]</code> | An array of ulimits to set in the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.user">user</a></code> | <code>string</code> | The user to use inside the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.versionConsistency">versionConsistency</a></code> | <code>aws-cdk-lib.aws_ecs.VersionConsistency</code> | Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory in which to run commands inside the container. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.containerDependencies">containerDependencies</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]</code> | Specify additional container dependencies which should be added after the container has been created in the task definition. |
-| <code><a href="#@btc-embedded/cdk-extensions.ContainerProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | The log group into which application container logs should be routed. |
-
----
-
-##### `image`<sup>Required</sup> <a name="image" id="@btc-embedded/cdk-extensions.ContainerProps.property.image"></a>
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.fqdn">fqdn</a></code> | <code>string</code> | The fully qualified domain name which the ALB will listen to. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | The user pool which should be attached to the clients. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.additonalUserPoolIdentityProviders">additonalUserPoolIdentityProviders</a></code> | <code>string[]</code> | Specify additional user pool identity providers to enable federated login. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.apiClientOptions">apiClientOptions</a></code> | <code>aws-cdk-lib.aws_cognito.UserPoolClientOptions</code> | Client options for the API client, extending and overwriting the defaults. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.callbackUrls">callbackUrls</a></code> | <code>string[]</code> | Specify additional callback URLs which the frontend uses for OIDC authentication. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendClientOptions">frontendClientOptions</a></code> | <code>aws-cdk-lib.aws_cognito.UserPoolClientOptions</code> | Client options for the frontend client, extending and overwriting the defaults. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendOAuthScopes">frontendOAuthScopes</a></code> | <code>aws-cdk-lib.aws_cognito.OAuthScope[]</code> | Additional OAuth scopes for the frontend. |
+| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.logoutUrls">logoutUrls</a></code> | <code>string[]</code> | Specify valid logout URLs which should be added to the frontend user pool client. |
+
+---
+
+##### `fqdn`<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.fqdn"></a>
 
 ```typescript
-public readonly image: ContainerImage;
+public readonly fqdn: string;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.ContainerImage
+- *Type:* string
 
-The image used to start a container.
+The fully qualified domain name which the ALB will listen to.
 
-This string is passed directly to the Docker daemon.
-Images in the Docker Hub registry are available by default.
-Other repositories are specified with either repository-url/image:tag or repository-url/image@digest.
-TODO: Update these to specify using classes of IContainerImage
+This setting is used to configure the correct callback URL for user pool
+client such that the ALB can perform authentication.
 
 ---
 
-##### `command`<sup>Optional</sup> <a name="command" id="@btc-embedded/cdk-extensions.ContainerProps.property.command"></a>
+##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.userPool"></a>
 
 ```typescript
-public readonly command: string[];
+public readonly userPool: IUserPool;
+```
+
+- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+
+The user pool which should be attached to the clients.
+
+---
+
+##### `additonalUserPoolIdentityProviders`<sup>Optional</sup> <a name="additonalUserPoolIdentityProviders" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.additonalUserPoolIdentityProviders"></a>
+
+```typescript
+public readonly additonalUserPoolIdentityProviders: string[];
 ```
 
 - *Type:* string[]
-- *Default:* CMD value built into container image.
 
-The command that is passed to the container.
+Specify additional user pool identity providers to enable federated login.
+
+---
+
+##### `apiClientOptions`<sup>Optional</sup> <a name="apiClientOptions" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.apiClientOptions"></a>
+
+```typescript
+public readonly apiClientOptions: UserPoolClientOptions;
+```
+
+- *Type:* aws-cdk-lib.aws_cognito.UserPoolClientOptions
+
+Client options for the API client, extending and overwriting the defaults.
+
+---
+
+##### `callbackUrls`<sup>Optional</sup> <a name="callbackUrls" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.callbackUrls"></a>
+
+```typescript
+public readonly callbackUrls: string[];
+```
+
+- *Type:* string[]
 
-If you provide a shell command as a single string, you have to quote command-line arguments.
+Specify additional callback URLs which the frontend uses for OIDC authentication.
 
 ---
 
-##### `containerName`<sup>Optional</sup> <a name="containerName" id="@btc-embedded/cdk-extensions.ContainerProps.property.containerName"></a>
+##### `frontendClientOptions`<sup>Optional</sup> <a name="frontendClientOptions" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendClientOptions"></a>
 
 ```typescript
-public readonly containerName: string;
+public readonly frontendClientOptions: UserPoolClientOptions;
 ```
 
-- *Type:* string
-- *Default:* id of node associated with ContainerDefinition.
+- *Type:* aws-cdk-lib.aws_cognito.UserPoolClientOptions
 
-The name of the container.
+Client options for the frontend client, extending and overwriting the defaults.
 
 ---
 
-##### `cpu`<sup>Optional</sup> <a name="cpu" id="@btc-embedded/cdk-extensions.ContainerProps.property.cpu"></a>
+##### `frontendOAuthScopes`<sup>Optional</sup> <a name="frontendOAuthScopes" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendOAuthScopes"></a>
 
 ```typescript
-public readonly cpu: number;
+public readonly frontendOAuthScopes: OAuthScope[];
 ```
 
-- *Type:* number
-- *Default:* No minimum CPU units reserved.
+- *Type:* aws-cdk-lib.aws_cognito.OAuthScope[]
 
-The minimum number of CPU units to reserve for the container.
+Additional OAuth scopes for the frontend.
 
 ---
 
-##### `credentialSpecs`<sup>Optional</sup> <a name="credentialSpecs" id="@btc-embedded/cdk-extensions.ContainerProps.property.credentialSpecs"></a>
+##### `logoutUrls`<sup>Optional</sup> <a name="logoutUrls" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.logoutUrls"></a>
 
 ```typescript
-public readonly credentialSpecs: CredentialSpec[];
+public readonly logoutUrls: string[];
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.CredentialSpec[]
-- *Default:* No credential specs.
+- *Type:* string[]
 
-A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication.
+Specify valid logout URLs which should be added to the frontend user pool client.
 
-We recommend that you use this parameter instead of the `dockerSecurityOptions`.
+---
 
-Currently, only one credential spec is allowed per container definition.
+### DeploymentConfigExtensionProps <a name="DeploymentConfigExtensionProps" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps"></a>
 
----
+Properties for configuring service deployment and capacity provider strategy.
 
-##### `disableNetworking`<sup>Optional</sup> <a name="disableNetworking" id="@btc-embedded/cdk-extensions.ContainerProps.property.disableNetworking"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.Initializer"></a>
 
 ```typescript
-public readonly disableNetworking: boolean;
-```
+import { DeploymentConfigExtensionProps } from '@btc-embedded/cdk-extensions'
 
-- *Type:* boolean
-- *Default:* false
+const deploymentConfigExtensionProps: DeploymentConfigExtensionProps = { ... }
+```
 
-Specifies whether networking is disabled within the container.
+#### Properties <a name="Properties" id="Properties"></a>
 
-When this parameter is true, networking is disabled within the container.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderBase">capacityProviderBase</a></code> | <code>number</code> | The base value for the FARGATE_SPOT capacity provider. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderWeight">capacityProviderWeight</a></code> | <code>number</code> | The weight value for the FARGATE_SPOT capacity provider. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback">circuitBreakerRollback</a></code> | <code>boolean</code> | Whether the circuit breaker should automatically roll back failed deployments. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker">enableCircuitBreaker</a></code> | <code>boolean</code> | Whether to enable the ECS deployment circuit breaker. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent">maxHealthyPercent</a></code> | <code>number</code> | The maximum healthy percent for the service deployment. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.minHealthyPercent">minHealthyPercent</a></code> | <code>number</code> | The minimum healthy percent for the service deployment. |
+| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.useFargateSpotInstances">useFargateSpotInstances</a></code> | <code>boolean</code> | Whether to use the cluster's FARGATE_SPOT capacity provider strategy. |
 
 ---
 
-##### `dnsSearchDomains`<sup>Optional</sup> <a name="dnsSearchDomains" id="@btc-embedded/cdk-extensions.ContainerProps.property.dnsSearchDomains"></a>
+##### `capacityProviderBase`<sup>Optional</sup> <a name="capacityProviderBase" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderBase"></a>
 
 ```typescript
-public readonly dnsSearchDomains: string[];
+public readonly capacityProviderBase: number;
 ```
 
-- *Type:* string[]
-- *Default:* No search domains.
+- *Type:* number
+- *Default:* 0
 
-A list of DNS search domains that are presented to the container.
+The base value for the FARGATE_SPOT capacity provider.
+
+This is the minimum number of tasks that should use Fargate Spot.
+Only used when useCapacityProvider is true.
 
 ---
 
-##### `dnsServers`<sup>Optional</sup> <a name="dnsServers" id="@btc-embedded/cdk-extensions.ContainerProps.property.dnsServers"></a>
+##### `capacityProviderWeight`<sup>Optional</sup> <a name="capacityProviderWeight" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderWeight"></a>
 
 ```typescript
-public readonly dnsServers: string[];
+public readonly capacityProviderWeight: number;
 ```
 
-- *Type:* string[]
-- *Default:* Default DNS servers.
+- *Type:* number
+- *Default:* 1
 
-A list of DNS servers that are presented to the container.
+The weight value for the FARGATE_SPOT capacity provider.
+
+Higher values mean more tasks will use Fargate Spot.
+Only used when useCapacityProvider is true.
 
 ---
 
-##### `dockerLabels`<sup>Optional</sup> <a name="dockerLabels" id="@btc-embedded/cdk-extensions.ContainerProps.property.dockerLabels"></a>
+##### `circuitBreakerRollback`<sup>Optional</sup> <a name="circuitBreakerRollback" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback"></a>
 
 ```typescript
-public readonly dockerLabels: {[ key: string ]: string};
+public readonly circuitBreakerRollback: boolean;
 ```
 
-- *Type:* {[ key: string ]: string}
-- *Default:* No labels.
+- *Type:* boolean
+- *Default:* true (if circuit breaker is enabled)
 
-A key/value map of labels to add to the container.
+Whether the circuit breaker should automatically roll back failed deployments.
+
+When enabled, ECS will automatically roll back to the previous task definition
+if the new deployment fails. Only applies when enableCircuitBreaker is true.
 
 ---
 
-##### `dockerSecurityOptions`<sup>Optional</sup> <a name="dockerSecurityOptions" id="@btc-embedded/cdk-extensions.ContainerProps.property.dockerSecurityOptions"></a>
+##### `enableCircuitBreaker`<sup>Optional</sup> <a name="enableCircuitBreaker" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker"></a>
 
 ```typescript
-public readonly dockerSecurityOptions: string[];
+public readonly enableCircuitBreaker: boolean;
 ```
 
-- *Type:* string[]
-- *Default:* No security labels.
+- *Type:* boolean
+- *Default:* true
 
-A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems.
+Whether to enable the ECS deployment circuit breaker.
+
+The circuit breaker monitors new deployments and automatically rolls back
+if tasks fail to start or become unhealthy.
 
 ---
 
-##### `enableRestartPolicy`<sup>Optional</sup> <a name="enableRestartPolicy" id="@btc-embedded/cdk-extensions.ContainerProps.property.enableRestartPolicy"></a>
+##### `maxHealthyPercent`<sup>Optional</sup> <a name="maxHealthyPercent" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent"></a>
 
 ```typescript
-public readonly enableRestartPolicy: boolean;
+public readonly maxHealthyPercent: number;
 ```
 
-- *Type:* boolean
-- *Default:* false unless `restartIgnoredExitCodes` or `restartAttemptPeriod` is set.
-
-Enable a restart policy for a container.
+- *Type:* number
+- *Default:* 200
 
-When you set up a restart policy, Amazon ECS can restart the container without needing to replace the task.
+The maximum healthy percent for the service deployment.
 
-> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html)
+Controls how many additional tasks can be started during deployment.
 
 ---
 
-##### `entryPoint`<sup>Optional</sup> <a name="entryPoint" id="@btc-embedded/cdk-extensions.ContainerProps.property.entryPoint"></a>
+##### `minHealthyPercent`<sup>Optional</sup> <a name="minHealthyPercent" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.minHealthyPercent"></a>
 
 ```typescript
-public readonly entryPoint: string[];
+public readonly minHealthyPercent: number;
 ```
 
-- *Type:* string[]
-- *Default:* Entry point configured in container.
+- *Type:* number
+- *Default:* 100
 
-The ENTRYPOINT value to pass to the container.
+The minimum healthy percent for the service deployment.
 
-> [https://docs.docker.com/engine/reference/builder/#entrypoint](https://docs.docker.com/engine/reference/builder/#entrypoint)
+Set to 0 to allow all tasks to be replaced at once for faster deployments
+where service interruption is acceptable.
 
 ---
 
-##### `environment`<sup>Optional</sup> <a name="environment" id="@btc-embedded/cdk-extensions.ContainerProps.property.environment"></a>
+##### `useFargateSpotInstances`<sup>Optional</sup> <a name="useFargateSpotInstances" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.useFargateSpotInstances"></a>
 
 ```typescript
-public readonly environment: {[ key: string ]: string};
+public readonly useFargateSpotInstances: boolean;
 ```
 
-- *Type:* {[ key: string ]: string}
-- *Default:* No environment variables.
+- *Type:* boolean
+- *Default:* false
 
-The environment variables to pass to the container.
+Whether to use the cluster's FARGATE_SPOT capacity provider strategy.
+
+When enabled, the service will use the capacity provider strategy
+configured at the cluster level (e.g., FARGATE_SPOT).
+
+**Requirements:**
+- The ECS cluster must have capacity providers enabled
+  (set `enableFargateSpotCapacityProvider: true` in EcsCluster)
 
 ---
 
-##### `environmentFiles`<sup>Optional</sup> <a name="environmentFiles" id="@btc-embedded/cdk-extensions.ContainerProps.property.environmentFiles"></a>
+### DocumentDbAccessExtensionProps <a name="DocumentDbAccessExtensionProps" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps"></a>
+
+Configuration for {@link DocumentDbAccessExtension}.
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.Initializer"></a>
 
 ```typescript
-public readonly environmentFiles: EnvironmentFile[];
-```
+import { DocumentDbAccessExtensionProps } from '@btc-embedded/cdk-extensions'
 
-- *Type:* aws-cdk-lib.aws_ecs.EnvironmentFile[]
-- *Default:* No environment files.
+const documentDbAccessExtensionProps: DocumentDbAccessExtensionProps = { ... }
+```
 
-The environment files to pass to the container.
+#### Properties <a name="Properties" id="Properties"></a>
 
-> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html)
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | ID of the security group associated with the database access path. |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | Name of the base platform stack to import the shared DocumentDB instance from. |
 
 ---
 
-##### `essential`<sup>Optional</sup> <a name="essential" id="@btc-embedded/cdk-extensions.ContainerProps.property.essential"></a>
+##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.securityGroupId"></a>
 
 ```typescript
-public readonly essential: boolean;
+public readonly securityGroupId: string;
 ```
 
-- *Type:* boolean
-- *Default:* true
-
-Specifies whether the container is marked essential.
+- *Type:* string
 
-If the essential parameter of a container is marked as true, and that container fails
-or stops for any reason, all other containers that are part of the task are stopped.
-If the essential parameter of a container is marked as false, then its failure does not
-affect the rest of the containers in a task. All tasks must have at least one essential container.
+ID of the security group associated with the database access path.
 
-If this parameter is omitted, a container is assumed to be essential.
+Note: This property is currently not referenced directly by this extension's
+implementation, but is kept as part of the public contract.
 
 ---
 
-##### `extraHosts`<sup>Optional</sup> <a name="extraHosts" id="@btc-embedded/cdk-extensions.ContainerProps.property.extraHosts"></a>
+##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.basePlatformStackName"></a>
 
 ```typescript
-public readonly extraHosts: {[ key: string ]: string};
+public readonly basePlatformStackName: string;
 ```
 
-- *Type:* {[ key: string ]: string}
-- *Default:* No extra hosts.
+- *Type:* string
 
-A list of hostnames and IP address mappings to append to the /etc/hosts file on the container.
+Name of the base platform stack to import the shared DocumentDB instance from.
+
+This is passed to {@link DocumentDB.fromBasePlatform}.
 
 ---
 
-##### `gpuCount`<sup>Optional</sup> <a name="gpuCount" id="@btc-embedded/cdk-extensions.ContainerProps.property.gpuCount"></a>
+### DocumentDBProps <a name="DocumentDBProps" id="@btc-embedded/cdk-extensions.DocumentDBProps"></a>
+
+Properties for {@link DocumentDB}.
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DocumentDBProps.Initializer"></a>
 
 ```typescript
-public readonly gpuCount: number;
+import { DocumentDBProps } from '@btc-embedded/cdk-extensions'
+
+const documentDBProps: DocumentDBProps = { ... }
 ```
 
-- *Type:* number
-- *Default:* No GPUs assigned.
+#### Properties <a name="Properties" id="Properties"></a>
 
-The number of GPUs assigned to the container.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.secretName">secretName</a></code> | <code>string</code> | Name of the Secrets Manager secret that stores the DocumentDB master credentials. |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.stackName">stackName</a></code> | <code>string</code> | Name of the stack this database belongs to. |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.username">username</a></code> | <code>string</code> | Master username for the DocumentDB cluster. |
+| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC to deploy the DocumentDB cluster into. |
 
 ---
 
-##### `healthCheck`<sup>Optional</sup> <a name="healthCheck" id="@btc-embedded/cdk-extensions.ContainerProps.property.healthCheck"></a>
+##### `secretName`<sup>Required</sup> <a name="secretName" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.secretName"></a>
 
 ```typescript
-public readonly healthCheck: HealthCheck;
+public readonly secretName: string;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.HealthCheck
-- *Default:* Health check configuration from container.
+- *Type:* string
 
-The health check command and associated configuration parameters for the container.
+Name of the Secrets Manager secret that stores the DocumentDB master credentials.
 
 ---
 
-##### `hostname`<sup>Optional</sup> <a name="hostname" id="@btc-embedded/cdk-extensions.ContainerProps.property.hostname"></a>
+##### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.stackName"></a>
 
 ```typescript
-public readonly hostname: string;
+public readonly stackName: string;
 ```
 
 - *Type:* string
-- *Default:* Automatic hostname.
 
-The hostname to use for your container.
+Name of the stack this database belongs to.
+
+Note: This value is currently not referenced directly by the implementation,
+but is kept as part of the public contract.
 
 ---
 
-##### `inferenceAcceleratorResources`<sup>Optional</sup> <a name="inferenceAcceleratorResources" id="@btc-embedded/cdk-extensions.ContainerProps.property.inferenceAcceleratorResources"></a>
+##### `username`<sup>Required</sup> <a name="username" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.username"></a>
 
 ```typescript
-public readonly inferenceAcceleratorResources: string[];
+public readonly username: string;
 ```
 
-- *Type:* string[]
-- *Default:* No inference accelerators assigned.
+- *Type:* string
 
-The inference accelerators referenced by the container.
+Master username for the DocumentDB cluster.
 
 ---
 
-##### `interactive`<sup>Optional</sup> <a name="interactive" id="@btc-embedded/cdk-extensions.ContainerProps.property.interactive"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.vpc"></a>
 
 ```typescript
-public readonly interactive: boolean;
+public readonly vpc: IVpc;
 ```
 
-- *Type:* boolean
-- *Default:* false
-
-When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
 
-> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive)
+VPC to deploy the DocumentDB cluster into.
 
 ---
 
-##### `linuxParameters`<sup>Optional</sup> <a name="linuxParameters" id="@btc-embedded/cdk-extensions.ContainerProps.property.linuxParameters"></a>
+### EcsClusterAttributes <a name="EcsClusterAttributes" id="@btc-embedded/cdk-extensions.EcsClusterAttributes"></a>
+
+Attributes required to import an existing ECS cluster from another stack.
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.Initializer"></a>
 
 ```typescript
-public readonly linuxParameters: LinuxParameters;
-```
+import { EcsClusterAttributes } from '@btc-embedded/cdk-extensions'
 
-- *Type:* aws-cdk-lib.aws_ecs.LinuxParameters
-- *Default:* No Linux parameters.
+const ecsClusterAttributes: EcsClusterAttributes = { ... }
+```
 
-Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
+#### Properties <a name="Properties" id="Properties"></a>
 
-For more information see [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html).
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterAttributes.property.vpcId">vpcId</a></code> | <code>string</code> | The ID of the VPC where the ECS cluster is located. |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterAttributes.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the stack where the ECS cluster is defined. |
 
 ---
 
-##### `logging`<sup>Optional</sup> <a name="logging" id="@btc-embedded/cdk-extensions.ContainerProps.property.logging"></a>
+##### `vpcId`<sup>Required</sup> <a name="vpcId" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.property.vpcId"></a>
 
 ```typescript
-public readonly logging: LogDriver;
+public readonly vpcId: string;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.LogDriver
-- *Default:* Containers use the same logging driver that the Docker daemon uses.
+- *Type:* string
 
-The log configuration specification for the container.
+The ID of the VPC where the ECS cluster is located.
+
+This id used to look
+up the VPC when importing the cluster.
 
 ---
 
-##### `memoryLimitMiB`<sup>Optional</sup> <a name="memoryLimitMiB" id="@btc-embedded/cdk-extensions.ContainerProps.property.memoryLimitMiB"></a>
+##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.property.basePlatformStackName"></a>
 
 ```typescript
-public readonly memoryLimitMiB: number;
+public readonly basePlatformStackName: string;
 ```
 
-- *Type:* number
-- *Default:* No memory limit.
-
-The amount (in MiB) of memory to present to the container.
+- *Type:* string
 
-If your container attempts to exceed the allocated memory, the container
-is terminated.
+The name of the stack where the ECS cluster is defined.
 
-At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
+This is usually the
+base platform stack.
 
 ---
 
-##### `memoryReservationMiB`<sup>Optional</sup> <a name="memoryReservationMiB" id="@btc-embedded/cdk-extensions.ContainerProps.property.memoryReservationMiB"></a>
+### EcsClusterProps <a name="EcsClusterProps" id="@btc-embedded/cdk-extensions.EcsClusterProps"></a>
 
-```typescript
-public readonly memoryReservationMiB: number;
-```
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EcsClusterProps.Initializer"></a>
 
-- *Type:* number
-- *Default:* No memory reserved.
+```typescript
+import { EcsClusterProps } from '@btc-embedded/cdk-extensions'
 
-The soft limit (in MiB) of memory to reserve for the container.
+const ecsClusterProps: EcsClusterProps = { ... }
+```
 
-When system memory is under heavy contention, Docker attempts to keep the
-container memory to this soft limit. However, your container can consume more
-memory when it needs to, up to either the hard limit specified with the memory
-parameter (if applicable), or all of the available memory on the container
-instance, whichever comes first.
+#### Properties <a name="Properties" id="Properties"></a>
 
-At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC in which to create the ECS cluster. |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersBase">capacityProvidersBase</a></code> | <code>number</code> | The base value for the capacity provider strategy. |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersWeight">capacityProvidersWeight</a></code> | <code>number</code> | The weight value for the capacity provider strategy. |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.createKmsExecCommandKey">createKmsExecCommandKey</a></code> | <code>boolean</code> | Whether to create a KMS key for execute command encryption. |
+| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.enableFargateSpotCapacityProvider">enableFargateSpotCapacityProvider</a></code> | <code>boolean</code> | Whether to enable Fargate Spot capacity provider. |
 
 ---
 
-##### `portMappings`<sup>Optional</sup> <a name="portMappings" id="@btc-embedded/cdk-extensions.ContainerProps.property.portMappings"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.vpc"></a>
 
 ```typescript
-public readonly portMappings: PortMapping[];
+public readonly vpc: IVpc;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.PortMapping[]
-- *Default:* No ports are mapped.
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
 
-The port mappings to add to the container definition.
+The VPC in which to create the ECS cluster.
 
 ---
 
-##### `privileged`<sup>Optional</sup> <a name="privileged" id="@btc-embedded/cdk-extensions.ContainerProps.property.privileged"></a>
+##### `capacityProvidersBase`<sup>Optional</sup> <a name="capacityProvidersBase" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersBase"></a>
 
 ```typescript
-public readonly privileged: boolean;
+public readonly capacityProvidersBase: number;
 ```
 
-- *Type:* boolean
-- *Default:* false
-
-Specifies whether the container is marked as privileged.
+- *Type:* number
 
-When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user).
+The base value for the capacity provider strategy.
 
 ---
 
-##### `pseudoTerminal`<sup>Optional</sup> <a name="pseudoTerminal" id="@btc-embedded/cdk-extensions.ContainerProps.property.pseudoTerminal"></a>
+##### `capacityProvidersWeight`<sup>Optional</sup> <a name="capacityProvidersWeight" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersWeight"></a>
 
 ```typescript
-public readonly pseudoTerminal: boolean;
+public readonly capacityProvidersWeight: number;
 ```
 
-- *Type:* boolean
-- *Default:* false
-
-When this parameter is true, a TTY is allocated.
-
-This parameter maps to Tty in the "Create a container section" of the
-Docker Remote API and the --tty option to `docker run`.
+- *Type:* number
 
-> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal)
+The weight value for the capacity provider strategy.
 
 ---
 
-##### `readonlyRootFilesystem`<sup>Optional</sup> <a name="readonlyRootFilesystem" id="@btc-embedded/cdk-extensions.ContainerProps.property.readonlyRootFilesystem"></a>
+##### `createKmsExecCommandKey`<sup>Optional</sup> <a name="createKmsExecCommandKey" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.createKmsExecCommandKey"></a>
 
 ```typescript
-public readonly readonlyRootFilesystem: boolean;
+public readonly createKmsExecCommandKey: boolean;
 ```
 
 - *Type:* boolean
-- *Default:* false
 
-When this parameter is true, the container is given read-only access to its root file system.
+Whether to create a KMS key for execute command encryption.
 
 ---
 
-##### `restartAttemptPeriod`<sup>Optional</sup> <a name="restartAttemptPeriod" id="@btc-embedded/cdk-extensions.ContainerProps.property.restartAttemptPeriod"></a>
+##### `enableFargateSpotCapacityProvider`<sup>Optional</sup> <a name="enableFargateSpotCapacityProvider" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.enableFargateSpotCapacityProvider"></a>
 
 ```typescript
-public readonly restartAttemptPeriod: Duration;
+public readonly enableFargateSpotCapacityProvider: boolean;
 ```
 
-- *Type:* aws-cdk-lib.Duration
-- *Default:* Duration.seconds(300) if `enableRestartPolicy` is true, otherwise no period.
-
-A period of time that the container must run for before a restart can be attempted.
+- *Type:* boolean
 
-A container can be restarted only once every `restartAttemptPeriod` seconds.
-If a container isn't able to run for this time period and exits early, it will not be restarted.
+Whether to enable Fargate Spot capacity provider.
 
-This property can't be used if `enableRestartPolicy` is set to false.
+---
 
-You can set a minimum `restartAttemptPeriod` of 60 seconds and a maximum `restartAttemptPeriod`
-of 1800 seconds.
+### EfsFileSystemLookupOptions <a name="EfsFileSystemLookupOptions" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions"></a>
 
----
+Lookup options for importing a filesystem from the base stack.
 
-##### `restartIgnoredExitCodes`<sup>Optional</sup> <a name="restartIgnoredExitCodes" id="@btc-embedded/cdk-extensions.ContainerProps.property.restartIgnoredExitCodes"></a>
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.Initializer"></a>
 
 ```typescript
-public readonly restartIgnoredExitCodes: number[];
-```
-
-- *Type:* number[]
-- *Default:* No exit codes are ignored.
+import { EfsFileSystemLookupOptions } from '@btc-embedded/cdk-extensions'
 
-A list of exit codes that Amazon ECS will ignore and not attempt a restart on.
+const efsFileSystemLookupOptions: EfsFileSystemLookupOptions = { ... }
+```
 
-This property can't be used if `enableRestartPolicy` is set to false.
+#### Properties <a name="Properties" id="Properties"></a>
 
-You can specify a maximum of 50 container exit codes.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.filesystemName">filesystemName</a></code> | <code>string</code> | The name of the filesystem to be imported. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the base platform stack. |
 
 ---
 
-##### `secrets`<sup>Optional</sup> <a name="secrets" id="@btc-embedded/cdk-extensions.ContainerProps.property.secrets"></a>
+##### `filesystemName`<sup>Required</sup> <a name="filesystemName" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.filesystemName"></a>
 
 ```typescript
-public readonly secrets: {[ key: string ]: Secret};
+public readonly filesystemName: string;
 ```
 
-- *Type:* {[ key: string ]: aws-cdk-lib.aws_ecs.Secret}
-- *Default:* No secret environment variables.
+- *Type:* string
 
-The secret environment variables to pass to the container.
+The name of the filesystem to be imported.
 
 ---
 
-##### `startTimeout`<sup>Optional</sup> <a name="startTimeout" id="@btc-embedded/cdk-extensions.ContainerProps.property.startTimeout"></a>
+##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.basePlatformStackName"></a>
 
 ```typescript
-public readonly startTimeout: Duration;
+public readonly basePlatformStackName: string;
 ```
 
-- *Type:* aws-cdk-lib.Duration
-- *Default:* none
+- *Type:* string
 
-Time duration (in seconds) to wait before giving up on resolving dependencies for a container.
+The name of the base platform stack.
 
 ---
 
-##### `stopTimeout`<sup>Optional</sup> <a name="stopTimeout" id="@btc-embedded/cdk-extensions.ContainerProps.property.stopTimeout"></a>
+### EfsFileSystemProps <a name="EfsFileSystemProps" id="@btc-embedded/cdk-extensions.EfsFileSystemProps"></a>
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.Initializer"></a>
 
 ```typescript
-public readonly stopTimeout: Duration;
+import { EfsFileSystemProps } from '@btc-embedded/cdk-extensions'
+
+const efsFileSystemProps: EfsFileSystemProps = { ... }
 ```
 
-- *Type:* aws-cdk-lib.Duration
-- *Default:* none
+#### Properties <a name="Properties" id="Properties"></a>
 
-Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.name">name</a></code> | <code>string</code> | The name to be used for the filesystem. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC to be used. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.automaticBackups">automaticBackups</a></code> | <code>boolean</code> | Enable automatic backups. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.removalPolicy">removalPolicy</a></code> | <code>aws-cdk-lib.RemovalPolicy</code> | Removal policy. |
 
 ---
 
-##### `systemControls`<sup>Optional</sup> <a name="systemControls" id="@btc-embedded/cdk-extensions.ContainerProps.property.systemControls"></a>
+##### `name`<sup>Required</sup> <a name="name" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.name"></a>
 
 ```typescript
-public readonly systemControls: SystemControl[];
+public readonly name: string;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.SystemControl[]
-- *Default:* No system controls are set.
+- *Type:* string
 
-A list of namespaced kernel parameters to set in the container.
+The name to be used for the filesystem.
 
-> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols)
+Has to be unique in the stack.
+Is also used for importing the filesystem from another stack.
 
 ---
 
-##### `ulimits`<sup>Optional</sup> <a name="ulimits" id="@btc-embedded/cdk-extensions.ContainerProps.property.ulimits"></a>
+##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.vpc"></a>
 
 ```typescript
-public readonly ulimits: Ulimit[];
+public readonly vpc: IVpc;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.Ulimit[]
+- *Type:* aws-cdk-lib.aws_ec2.IVpc
 
-An array of ulimits to set in the container.
+The VPC to be used.
 
 ---
 
-##### `user`<sup>Optional</sup> <a name="user" id="@btc-embedded/cdk-extensions.ContainerProps.property.user"></a>
+##### `automaticBackups`<sup>Optional</sup> <a name="automaticBackups" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.automaticBackups"></a>
 
 ```typescript
-public readonly user: string;
+public readonly automaticBackups: boolean;
 ```
 
-- *Type:* string
-- *Default:* root
-
-The user to use inside the container.
+- *Type:* boolean
 
-This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
+Enable automatic backups.
 
-> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user)
+Default: `false`.
 
 ---
 
-##### `versionConsistency`<sup>Optional</sup> <a name="versionConsistency" id="@btc-embedded/cdk-extensions.ContainerProps.property.versionConsistency"></a>
+##### `removalPolicy`<sup>Optional</sup> <a name="removalPolicy" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.removalPolicy"></a>
 
 ```typescript
-public readonly versionConsistency: VersionConsistency;
+public readonly removalPolicy: RemovalPolicy;
 ```
 
-- *Type:* aws-cdk-lib.aws_ecs.VersionConsistency
-- *Default:* VersionConsistency.DISABLED if `image` is a CDK asset, VersionConsistency.ENABLED otherwise
-
-Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest.
+- *Type:* aws-cdk-lib.RemovalPolicy
 
-If you set the value for a container as disabled, Amazon ECS will
-not resolve the provided container image tag to a digest and will use the
-original image URI specified in the container definition for deployment.
+Removal policy.
 
-> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency)
+Default: {@link RemovalPolicy.DESTROY}.
 
 ---
 
-##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@btc-embedded/cdk-extensions.ContainerProps.property.workingDirectory"></a>
+### EfsMountExtensionProperties <a name="EfsMountExtensionProperties" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties"></a>
+
+EFS extension properties.
+
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.Initializer"></a>
 
 ```typescript
-public readonly workingDirectory: string;
+import { EfsMountExtensionProperties } from '@btc-embedded/cdk-extensions'
+
+const efsMountExtensionProperties: EfsMountExtensionProperties = { ... }
 ```
 
-- *Type:* string
-- *Default:* /
+#### Properties <a name="Properties" id="Properties"></a>
 
-The working directory in which to run commands inside the container.
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.accessMode">accessMode</a></code> | <code><a href="#@btc-embedded/cdk-extensions.EfsAccessMode">EfsAccessMode</a></code> | The access mode for the filesystem for this service. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.filesystem">filesystem</a></code> | <code><a href="#@btc-embedded/cdk-extensions.IEfsFileSystem">IEfsFileSystem</a></code> | The filesystem to be mounted. |
+| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.path">path</a></code> | <code>string</code> | The path to mount the EFS to. |
 
 ---
 
-##### `containerDependencies`<sup>Optional</sup> <a name="containerDependencies" id="@btc-embedded/cdk-extensions.ContainerProps.property.containerDependencies"></a>
+##### `accessMode`<sup>Required</sup> <a name="accessMode" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.accessMode"></a>
 
 ```typescript
-public readonly containerDependencies: ContainerDependency[];
+public readonly accessMode: EfsAccessMode;
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]
+- *Type:* <a href="#@btc-embedded/cdk-extensions.EfsAccessMode">EfsAccessMode</a>
 
-Specify additional container dependencies which should be added after the container has been created in the task definition.
+The access mode for the filesystem for this service.
 
 ---
 
-##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.ContainerProps.property.logGroup"></a>
+##### `filesystem`<sup>Required</sup> <a name="filesystem" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.filesystem"></a>
 
 ```typescript
-public readonly logGroup: ILogGroup;
+public readonly filesystem: IEfsFileSystem;
 ```
 
-- *Type:* aws-cdk-lib.aws_logs.ILogGroup
-- *Default:* A log group is automatically created for you if the `ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER` feature flag is set.
+- *Type:* <a href="#@btc-embedded/cdk-extensions.IEfsFileSystem">IEfsFileSystem</a>
 
-The log group into which application container logs should be routed.
+The filesystem to be mounted.
 
 ---
 
-### DefaultUserPoolClientsProps <a name="DefaultUserPoolClientsProps" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps"></a>
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.Initializer"></a>
+##### `path`<sup>Required</sup> <a name="path" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.path"></a>
 
 ```typescript
-import { DefaultUserPoolClientsProps } from '@btc-embedded/cdk-extensions'
-
-const defaultUserPoolClientsProps: DefaultUserPoolClientsProps = { ... }
+public readonly path: string;
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
-
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.fqdn">fqdn</a></code> | <code>string</code> | The fully qualified domain name which the ALB will listen to. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.userPool">userPool</a></code> | <code>aws-cdk-lib.aws_cognito.IUserPool</code> | The user pool which should be attached to the clients. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.additonalUserPoolIdentityProviders">additonalUserPoolIdentityProviders</a></code> | <code>string[]</code> | Specify additional user pool identity providers to enable federated login. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.apiClientOptions">apiClientOptions</a></code> | <code>aws-cdk-lib.aws_cognito.UserPoolClientOptions</code> | Client options for the API client, extending and overwriting the defaults. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.callbackUrls">callbackUrls</a></code> | <code>string[]</code> | Specify additional callback URLs which the frontend uses for OIDC authentication. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendClientOptions">frontendClientOptions</a></code> | <code>aws-cdk-lib.aws_cognito.UserPoolClientOptions</code> | Client options for the frontend client, extending and overwriting the defaults. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendOAuthScopes">frontendOAuthScopes</a></code> | <code>aws-cdk-lib.aws_cognito.OAuthScope[]</code> | Additional OAuth scopes for the frontend. |
-| <code><a href="#@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.logoutUrls">logoutUrls</a></code> | <code>string[]</code> | Specify valid logout URLs which should be added to the frontend user pool client. |
+- *Type:* string
+
+The path to mount the EFS to.
 
 ---
 
-##### `fqdn`<sup>Required</sup> <a name="fqdn" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.fqdn"></a>
+### EnhancedContainerProps <a name="EnhancedContainerProps" id="@btc-embedded/cdk-extensions.EnhancedContainerProps"></a>
 
-```typescript
-public readonly fqdn: string;
-```
+Enhanced container properties that combine the required props from Container with all options from ContainerDefinitionOptions.
 
-- *Type:* string
+This interface is used by both ApplicationContainer and ExtraContainerExtension
+to provide a consistent API for container configuration.
 
-The fully qualified domain name which the ALB will listen to.
+#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.Initializer"></a>
 
-This setting is used to configure the correct callback URL for user pool
-client such that the ALB can perform authentication.
+```typescript
+import { EnhancedContainerProps } from '@btc-embedded/cdk-extensions'
 
----
+const enhancedContainerProps: EnhancedContainerProps = { ... }
+```
 
-##### `userPool`<sup>Required</sup> <a name="userPool" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.userPool"></a>
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.image">image</a></code> | <code>aws-cdk-lib.aws_ecs.ContainerImage</code> | The image used to start a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.command">command</a></code> | <code>string[]</code> | The command that is passed to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.containerName">containerName</a></code> | <code>string</code> | The name of the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.cpu">cpu</a></code> | <code>number</code> | The minimum number of CPU units to reserve for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.credentialSpecs">credentialSpecs</a></code> | <code>aws-cdk-lib.aws_ecs.CredentialSpec[]</code> | A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.disableNetworking">disableNetworking</a></code> | <code>boolean</code> | Specifies whether networking is disabled within the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dnsSearchDomains">dnsSearchDomains</a></code> | <code>string[]</code> | A list of DNS search domains that are presented to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dnsServers">dnsServers</a></code> | <code>string[]</code> | A list of DNS servers that are presented to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dockerLabels">dockerLabels</a></code> | <code>{[ key: string ]: string}</code> | A key/value map of labels to add to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dockerSecurityOptions">dockerSecurityOptions</a></code> | <code>string[]</code> | A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.enableRestartPolicy">enableRestartPolicy</a></code> | <code>boolean</code> | Enable a restart policy for a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.entryPoint">entryPoint</a></code> | <code>string[]</code> | The ENTRYPOINT value to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.environment">environment</a></code> | <code>{[ key: string ]: string}</code> | The environment variables to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.environmentFiles">environmentFiles</a></code> | <code>aws-cdk-lib.aws_ecs.EnvironmentFile[]</code> | The environment files to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.essential">essential</a></code> | <code>boolean</code> | Specifies whether the container is marked essential. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.extraHosts">extraHosts</a></code> | <code>{[ key: string ]: string}</code> | A list of hostnames and IP address mappings to append to the /etc/hosts file on the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.gpuCount">gpuCount</a></code> | <code>number</code> | The number of GPUs assigned to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.healthCheck">healthCheck</a></code> | <code>aws-cdk-lib.aws_ecs.HealthCheck</code> | The health check command and associated configuration parameters for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.hostname">hostname</a></code> | <code>string</code> | The hostname to use for your container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.inferenceAcceleratorResources">inferenceAcceleratorResources</a></code> | <code>string[]</code> | The inference accelerators referenced by the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.interactive">interactive</a></code> | <code>boolean</code> | When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.linuxParameters">linuxParameters</a></code> | <code>aws-cdk-lib.aws_ecs.LinuxParameters</code> | Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.logging">logging</a></code> | <code>aws-cdk-lib.aws_ecs.LogDriver</code> | The log configuration specification for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryLimitMiB">memoryLimitMiB</a></code> | <code>number</code> | The amount (in MiB) of memory to present to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryReservationMiB">memoryReservationMiB</a></code> | <code>number</code> | The soft limit (in MiB) of memory to reserve for the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.portMappings">portMappings</a></code> | <code>aws-cdk-lib.aws_ecs.PortMapping[]</code> | The port mappings to add to the container definition. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.privileged">privileged</a></code> | <code>boolean</code> | Specifies whether the container is marked as privileged. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.pseudoTerminal">pseudoTerminal</a></code> | <code>boolean</code> | When this parameter is true, a TTY is allocated. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.readonlyRootFilesystem">readonlyRootFilesystem</a></code> | <code>boolean</code> | When this parameter is true, the container is given read-only access to its root file system. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.restartAttemptPeriod">restartAttemptPeriod</a></code> | <code>aws-cdk-lib.Duration</code> | A period of time that the container must run for before a restart can be attempted. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.restartIgnoredExitCodes">restartIgnoredExitCodes</a></code> | <code>number[]</code> | A list of exit codes that Amazon ECS will ignore and not attempt a restart on. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.secrets">secrets</a></code> | <code>{[ key: string ]: aws-cdk-lib.aws_ecs.Secret}</code> | The secret environment variables to pass to the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.startTimeout">startTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before giving up on resolving dependencies for a container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.stopTimeout">stopTimeout</a></code> | <code>aws-cdk-lib.Duration</code> | Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.systemControls">systemControls</a></code> | <code>aws-cdk-lib.aws_ecs.SystemControl[]</code> | A list of namespaced kernel parameters to set in the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.ulimits">ulimits</a></code> | <code>aws-cdk-lib.aws_ecs.Ulimit[]</code> | An array of ulimits to set in the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.user">user</a></code> | <code>string</code> | The user to use inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.versionConsistency">versionConsistency</a></code> | <code>aws-cdk-lib.aws_ecs.VersionConsistency</code> | Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.workingDirectory">workingDirectory</a></code> | <code>string</code> | The working directory in which to run commands inside the container. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.containerDependencies">containerDependencies</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]</code> | Container dependencies (used by ExtraContainerExtension). |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.healthCheckEndpoint">healthCheckEndpoint</a></code> | <code>string</code> | Simplified health check - just specify the HTTP endpoint path. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | The log group into which application container logs should be routed. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryMiB">memoryMiB</a></code> | <code>number</code> | How much memory in megabytes the container requires. |
+| <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps.property.trafficPort">trafficPort</a></code> | <code>number</code> | What port the image listens for traffic on. |
+
+---
+
+##### `image`<sup>Required</sup> <a name="image" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.image"></a>
 
 ```typescript
-public readonly userPool: IUserPool;
+public readonly image: ContainerImage;
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.IUserPool
+- *Type:* aws-cdk-lib.aws_ecs.ContainerImage
 
-The user pool which should be attached to the clients.
+The image used to start a container.
+
+This string is passed directly to the Docker daemon.
+Images in the Docker Hub registry are available by default.
+Other repositories are specified with either repository-url/image:tag or repository-url/image@digest.
+TODO: Update these to specify using classes of IContainerImage
 
 ---
 
-##### `additonalUserPoolIdentityProviders`<sup>Optional</sup> <a name="additonalUserPoolIdentityProviders" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.additonalUserPoolIdentityProviders"></a>
+##### `command`<sup>Optional</sup> <a name="command" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.command"></a>
 
 ```typescript
-public readonly additonalUserPoolIdentityProviders: string[];
+public readonly command: string[];
 ```
 
 - *Type:* string[]
+- *Default:* CMD value built into container image.
 
-Specify additional user pool identity providers to enable federated login.
+The command that is passed to the container.
+
+If you provide a shell command as a single string, you have to quote command-line arguments.
 
 ---
 
-##### `apiClientOptions`<sup>Optional</sup> <a name="apiClientOptions" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.apiClientOptions"></a>
+##### `containerName`<sup>Optional</sup> <a name="containerName" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.containerName"></a>
 
 ```typescript
-public readonly apiClientOptions: UserPoolClientOptions;
+public readonly containerName: string;
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.UserPoolClientOptions
+- *Type:* string
+- *Default:* id of node associated with ContainerDefinition.
 
-Client options for the API client, extending and overwriting the defaults.
+The name of the container.
 
 ---
 
-##### `callbackUrls`<sup>Optional</sup> <a name="callbackUrls" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.callbackUrls"></a>
+##### `cpu`<sup>Optional</sup> <a name="cpu" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.cpu"></a>
 
 ```typescript
-public readonly callbackUrls: string[];
+public readonly cpu: number;
 ```
 
-- *Type:* string[]
+- *Type:* number
+- *Default:* No minimum CPU units reserved.
 
-Specify additional callback URLs which the frontend uses for OIDC authentication.
+The minimum number of CPU units to reserve for the container.
 
 ---
 
-##### `frontendClientOptions`<sup>Optional</sup> <a name="frontendClientOptions" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendClientOptions"></a>
+##### `credentialSpecs`<sup>Optional</sup> <a name="credentialSpecs" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.credentialSpecs"></a>
 
 ```typescript
-public readonly frontendClientOptions: UserPoolClientOptions;
+public readonly credentialSpecs: CredentialSpec[];
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.UserPoolClientOptions
+- *Type:* aws-cdk-lib.aws_ecs.CredentialSpec[]
+- *Default:* No credential specs.
 
-Client options for the frontend client, extending and overwriting the defaults.
+A list of ARNs in SSM or Amazon S3 to a credential spec (`CredSpec`) file that configures the container for Active Directory authentication.
+
+We recommend that you use this parameter instead of the `dockerSecurityOptions`.
+
+Currently, only one credential spec is allowed per container definition.
 
 ---
 
-##### `frontendOAuthScopes`<sup>Optional</sup> <a name="frontendOAuthScopes" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.frontendOAuthScopes"></a>
+##### `disableNetworking`<sup>Optional</sup> <a name="disableNetworking" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.disableNetworking"></a>
 
 ```typescript
-public readonly frontendOAuthScopes: OAuthScope[];
+public readonly disableNetworking: boolean;
 ```
 
-- *Type:* aws-cdk-lib.aws_cognito.OAuthScope[]
+- *Type:* boolean
+- *Default:* false
 
-Additional OAuth scopes for the frontend.
+Specifies whether networking is disabled within the container.
+
+When this parameter is true, networking is disabled within the container.
 
 ---
 
-##### `logoutUrls`<sup>Optional</sup> <a name="logoutUrls" id="@btc-embedded/cdk-extensions.DefaultUserPoolClientsProps.property.logoutUrls"></a>
+##### `dnsSearchDomains`<sup>Optional</sup> <a name="dnsSearchDomains" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dnsSearchDomains"></a>
 
 ```typescript
-public readonly logoutUrls: string[];
+public readonly dnsSearchDomains: string[];
 ```
 
 - *Type:* string[]
+- *Default:* No search domains.
 
-Specify valid logout URLs which should be added to the frontend user pool client.
+A list of DNS search domains that are presented to the container.
 
 ---
 
-### DeploymentConfigExtensionProps <a name="DeploymentConfigExtensionProps" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps"></a>
-
-Properties for configuring service deployment and capacity provider strategy.
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.Initializer"></a>
+##### `dnsServers`<sup>Optional</sup> <a name="dnsServers" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dnsServers"></a>
 
 ```typescript
-import { DeploymentConfigExtensionProps } from '@btc-embedded/cdk-extensions'
-
-const deploymentConfigExtensionProps: DeploymentConfigExtensionProps = { ... }
+public readonly dnsServers: string[];
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* string[]
+- *Default:* Default DNS servers.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderBase">capacityProviderBase</a></code> | <code>number</code> | The base value for the FARGATE_SPOT capacity provider. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderWeight">capacityProviderWeight</a></code> | <code>number</code> | The weight value for the FARGATE_SPOT capacity provider. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback">circuitBreakerRollback</a></code> | <code>boolean</code> | Whether the circuit breaker should automatically roll back failed deployments. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker">enableCircuitBreaker</a></code> | <code>boolean</code> | Whether to enable the ECS deployment circuit breaker. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent">maxHealthyPercent</a></code> | <code>number</code> | The maximum healthy percent for the service deployment. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.minHealthyPercent">minHealthyPercent</a></code> | <code>number</code> | The minimum healthy percent for the service deployment. |
-| <code><a href="#@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.useFargateSpotInstances">useFargateSpotInstances</a></code> | <code>boolean</code> | Whether to use the cluster's FARGATE_SPOT capacity provider strategy. |
+A list of DNS servers that are presented to the container.
 
 ---
 
-##### `capacityProviderBase`<sup>Optional</sup> <a name="capacityProviderBase" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderBase"></a>
+##### `dockerLabels`<sup>Optional</sup> <a name="dockerLabels" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dockerLabels"></a>
 
 ```typescript
-public readonly capacityProviderBase: number;
+public readonly dockerLabels: {[ key: string ]: string};
 ```
 
-- *Type:* number
-- *Default:* 0
-
-The base value for the FARGATE_SPOT capacity provider.
+- *Type:* {[ key: string ]: string}
+- *Default:* No labels.
 
-This is the minimum number of tasks that should use Fargate Spot.
-Only used when useCapacityProvider is true.
+A key/value map of labels to add to the container.
 
 ---
 
-##### `capacityProviderWeight`<sup>Optional</sup> <a name="capacityProviderWeight" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.capacityProviderWeight"></a>
+##### `dockerSecurityOptions`<sup>Optional</sup> <a name="dockerSecurityOptions" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.dockerSecurityOptions"></a>
 
 ```typescript
-public readonly capacityProviderWeight: number;
+public readonly dockerSecurityOptions: string[];
 ```
 
-- *Type:* number
-- *Default:* 1
-
-The weight value for the FARGATE_SPOT capacity provider.
+- *Type:* string[]
+- *Default:* No security labels.
 
-Higher values mean more tasks will use Fargate Spot.
-Only used when useCapacityProvider is true.
+A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems.
 
 ---
 
-##### `circuitBreakerRollback`<sup>Optional</sup> <a name="circuitBreakerRollback" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.circuitBreakerRollback"></a>
+##### `enableRestartPolicy`<sup>Optional</sup> <a name="enableRestartPolicy" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.enableRestartPolicy"></a>
 
 ```typescript
-public readonly circuitBreakerRollback: boolean;
+public readonly enableRestartPolicy: boolean;
 ```
 
 - *Type:* boolean
-- *Default:* true (if circuit breaker is enabled)
+- *Default:* false unless `restartIgnoredExitCodes` or `restartAttemptPeriod` is set.
 
-Whether the circuit breaker should automatically roll back failed deployments.
+Enable a restart policy for a container.
 
-When enabled, ECS will automatically roll back to the previous task definition
-if the new deployment fails. Only applies when enableCircuitBreaker is true.
+When you set up a restart policy, Amazon ECS can restart the container without needing to replace the task.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html)
 
 ---
 
-##### `enableCircuitBreaker`<sup>Optional</sup> <a name="enableCircuitBreaker" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.enableCircuitBreaker"></a>
+##### `entryPoint`<sup>Optional</sup> <a name="entryPoint" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.entryPoint"></a>
 
 ```typescript
-public readonly enableCircuitBreaker: boolean;
+public readonly entryPoint: string[];
 ```
 
-- *Type:* boolean
-- *Default:* true
+- *Type:* string[]
+- *Default:* Entry point configured in container.
 
-Whether to enable the ECS deployment circuit breaker.
+The ENTRYPOINT value to pass to the container.
 
-The circuit breaker monitors new deployments and automatically rolls back
-if tasks fail to start or become unhealthy.
+> [https://docs.docker.com/engine/reference/builder/#entrypoint](https://docs.docker.com/engine/reference/builder/#entrypoint)
 
 ---
 
-##### `maxHealthyPercent`<sup>Optional</sup> <a name="maxHealthyPercent" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.maxHealthyPercent"></a>
+##### `environment`<sup>Optional</sup> <a name="environment" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.environment"></a>
 
 ```typescript
-public readonly maxHealthyPercent: number;
+public readonly environment: {[ key: string ]: string};
 ```
 
-- *Type:* number
-- *Default:* 200
-
-The maximum healthy percent for the service deployment.
+- *Type:* {[ key: string ]: string}
+- *Default:* No environment variables.
 
-Controls how many additional tasks can be started during deployment.
+The environment variables to pass to the container.
 
 ---
 
-##### `minHealthyPercent`<sup>Optional</sup> <a name="minHealthyPercent" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.minHealthyPercent"></a>
+##### `environmentFiles`<sup>Optional</sup> <a name="environmentFiles" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.environmentFiles"></a>
 
 ```typescript
-public readonly minHealthyPercent: number;
+public readonly environmentFiles: EnvironmentFile[];
 ```
 
-- *Type:* number
-- *Default:* 100
+- *Type:* aws-cdk-lib.aws_ecs.EnvironmentFile[]
+- *Default:* No environment files.
 
-The minimum healthy percent for the service deployment.
+The environment files to pass to the container.
 
-Set to 0 to allow all tasks to be replaced at once for faster deployments
-where service interruption is acceptable.
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html)
 
 ---
 
-##### `useFargateSpotInstances`<sup>Optional</sup> <a name="useFargateSpotInstances" id="@btc-embedded/cdk-extensions.DeploymentConfigExtensionProps.property.useFargateSpotInstances"></a>
+##### `essential`<sup>Optional</sup> <a name="essential" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.essential"></a>
 
 ```typescript
-public readonly useFargateSpotInstances: boolean;
+public readonly essential: boolean;
 ```
 
 - *Type:* boolean
-- *Default:* false
+- *Default:* true
 
-Whether to use the cluster's FARGATE_SPOT capacity provider strategy.
+Specifies whether the container is marked essential.
 
-When enabled, the service will use the capacity provider strategy
-configured at the cluster level (e.g., FARGATE_SPOT).
+If the essential parameter of a container is marked as true, and that container fails
+or stops for any reason, all other containers that are part of the task are stopped.
+If the essential parameter of a container is marked as false, then its failure does not
+affect the rest of the containers in a task. All tasks must have at least one essential container.
 
-**Requirements:**
-- The ECS cluster must have capacity providers enabled
-  (set `enableFargateSpotCapacityProvider: true` in EcsCluster)
+If this parameter is omitted, a container is assumed to be essential.
 
 ---
 
-### DocumentDbAccessExtensionProps <a name="DocumentDbAccessExtensionProps" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps"></a>
-
-Configuration for {@link DocumentDbAccessExtension}.
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.Initializer"></a>
+##### `extraHosts`<sup>Optional</sup> <a name="extraHosts" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.extraHosts"></a>
 
 ```typescript
-import { DocumentDbAccessExtensionProps } from '@btc-embedded/cdk-extensions'
-
-const documentDbAccessExtensionProps: DocumentDbAccessExtensionProps = { ... }
+public readonly extraHosts: {[ key: string ]: string};
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* {[ key: string ]: string}
+- *Default:* No extra hosts.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.securityGroupId">securityGroupId</a></code> | <code>string</code> | ID of the security group associated with the database access path. |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | Name of the base platform stack to import the shared DocumentDB instance from. |
+A list of hostnames and IP address mappings to append to the /etc/hosts file on the container.
 
 ---
 
-##### `securityGroupId`<sup>Required</sup> <a name="securityGroupId" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.securityGroupId"></a>
+##### `gpuCount`<sup>Optional</sup> <a name="gpuCount" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.gpuCount"></a>
 
 ```typescript
-public readonly securityGroupId: string;
+public readonly gpuCount: number;
 ```
 
-- *Type:* string
-
-ID of the security group associated with the database access path.
+- *Type:* number
+- *Default:* No GPUs assigned.
 
-Note: This property is currently not referenced directly by this extension's
-implementation, but is kept as part of the public contract.
+The number of GPUs assigned to the container.
 
 ---
 
-##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.DocumentDbAccessExtensionProps.property.basePlatformStackName"></a>
+##### `healthCheck`<sup>Optional</sup> <a name="healthCheck" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.healthCheck"></a>
 
 ```typescript
-public readonly basePlatformStackName: string;
+public readonly healthCheck: HealthCheck;
 ```
 
-- *Type:* string
-
-Name of the base platform stack to import the shared DocumentDB instance from.
+- *Type:* aws-cdk-lib.aws_ecs.HealthCheck
+- *Default:* Health check configuration from container.
 
-This is passed to {@link DocumentDB.fromBasePlatform}.
+The health check command and associated configuration parameters for the container.
 
 ---
 
-### DocumentDBProps <a name="DocumentDBProps" id="@btc-embedded/cdk-extensions.DocumentDBProps"></a>
-
-Properties for {@link DocumentDB}.
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.DocumentDBProps.Initializer"></a>
+##### `hostname`<sup>Optional</sup> <a name="hostname" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.hostname"></a>
 
 ```typescript
-import { DocumentDBProps } from '@btc-embedded/cdk-extensions'
-
-const documentDBProps: DocumentDBProps = { ... }
+public readonly hostname: string;
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* string
+- *Default:* Automatic hostname.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.secretName">secretName</a></code> | <code>string</code> | Name of the Secrets Manager secret that stores the DocumentDB master credentials. |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.stackName">stackName</a></code> | <code>string</code> | Name of the stack this database belongs to. |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.username">username</a></code> | <code>string</code> | Master username for the DocumentDB cluster. |
-| <code><a href="#@btc-embedded/cdk-extensions.DocumentDBProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | VPC to deploy the DocumentDB cluster into. |
+The hostname to use for your container.
 
 ---
 
-##### `secretName`<sup>Required</sup> <a name="secretName" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.secretName"></a>
+##### `inferenceAcceleratorResources`<sup>Optional</sup> <a name="inferenceAcceleratorResources" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.inferenceAcceleratorResources"></a>
 
 ```typescript
-public readonly secretName: string;
+public readonly inferenceAcceleratorResources: string[];
 ```
 
-- *Type:* string
+- *Type:* string[]
+- *Default:* No inference accelerators assigned.
 
-Name of the Secrets Manager secret that stores the DocumentDB master credentials.
+The inference accelerators referenced by the container.
 
 ---
 
-##### `stackName`<sup>Required</sup> <a name="stackName" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.stackName"></a>
+##### `interactive`<sup>Optional</sup> <a name="interactive" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.interactive"></a>
 
 ```typescript
-public readonly stackName: string;
+public readonly interactive: boolean;
 ```
 
-- *Type:* string
+- *Type:* boolean
+- *Default:* false
 
-Name of the stack this database belongs to.
+When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
 
-Note: This value is currently not referenced directly by the implementation,
-but is kept as part of the public contract.
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive)
 
 ---
 
-##### `username`<sup>Required</sup> <a name="username" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.username"></a>
+##### `linuxParameters`<sup>Optional</sup> <a name="linuxParameters" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.linuxParameters"></a>
 
 ```typescript
-public readonly username: string;
+public readonly linuxParameters: LinuxParameters;
 ```
 
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_ecs.LinuxParameters
+- *Default:* No Linux parameters.
 
-Master username for the DocumentDB cluster.
+Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
+
+For more information see [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html).
 
 ---
 
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.DocumentDBProps.property.vpc"></a>
+##### `logging`<sup>Optional</sup> <a name="logging" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.logging"></a>
 
 ```typescript
-public readonly vpc: IVpc;
+public readonly logging: LogDriver;
 ```
 
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* aws-cdk-lib.aws_ecs.LogDriver
+- *Default:* Containers use the same logging driver that the Docker daemon uses.
 
-VPC to deploy the DocumentDB cluster into.
+The log configuration specification for the container.
 
 ---
 
-### EcsClusterAttributes <a name="EcsClusterAttributes" id="@btc-embedded/cdk-extensions.EcsClusterAttributes"></a>
-
-Attributes required to import an existing ECS cluster from another stack.
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.Initializer"></a>
+##### `memoryLimitMiB`<sup>Optional</sup> <a name="memoryLimitMiB" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryLimitMiB"></a>
 
 ```typescript
-import { EcsClusterAttributes } from '@btc-embedded/cdk-extensions'
-
-const ecsClusterAttributes: EcsClusterAttributes = { ... }
+public readonly memoryLimitMiB: number;
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* number
+- *Default:* No memory limit.
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterAttributes.property.vpcId">vpcId</a></code> | <code>string</code> | The ID of the VPC where the ECS cluster is located. |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterAttributes.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the stack where the ECS cluster is defined. |
+The amount (in MiB) of memory to present to the container.
+
+If your container attempts to exceed the allocated memory, the container
+is terminated.
+
+At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
 
 ---
 
-##### `vpcId`<sup>Required</sup> <a name="vpcId" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.property.vpcId"></a>
+##### `memoryReservationMiB`<sup>Optional</sup> <a name="memoryReservationMiB" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryReservationMiB"></a>
 
 ```typescript
-public readonly vpcId: string;
+public readonly memoryReservationMiB: number;
 ```
 
-- *Type:* string
+- *Type:* number
+- *Default:* No memory reserved.
 
-The ID of the VPC where the ECS cluster is located.
+The soft limit (in MiB) of memory to reserve for the container.
 
-This id used to look
-up the VPC when importing the cluster.
+When system memory is under heavy contention, Docker attempts to keep the
+container memory to this soft limit. However, your container can consume more
+memory when it needs to, up to either the hard limit specified with the memory
+parameter (if applicable), or all of the available memory on the container
+instance, whichever comes first.
+
+At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services.
 
 ---
 
-##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.EcsClusterAttributes.property.basePlatformStackName"></a>
+##### `portMappings`<sup>Optional</sup> <a name="portMappings" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.portMappings"></a>
 
 ```typescript
-public readonly basePlatformStackName: string;
+public readonly portMappings: PortMapping[];
 ```
 
-- *Type:* string
-
-The name of the stack where the ECS cluster is defined.
+- *Type:* aws-cdk-lib.aws_ecs.PortMapping[]
+- *Default:* No ports are mapped.
 
-This is usually the
-base platform stack.
+The port mappings to add to the container definition.
 
 ---
 
-### EcsClusterProps <a name="EcsClusterProps" id="@btc-embedded/cdk-extensions.EcsClusterProps"></a>
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EcsClusterProps.Initializer"></a>
+##### `privileged`<sup>Optional</sup> <a name="privileged" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.privileged"></a>
 
 ```typescript
-import { EcsClusterProps } from '@btc-embedded/cdk-extensions'
-
-const ecsClusterProps: EcsClusterProps = { ... }
+public readonly privileged: boolean;
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* boolean
+- *Default:* false
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC in which to create the ECS cluster. |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersBase">capacityProvidersBase</a></code> | <code>number</code> | The base value for the capacity provider strategy. |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersWeight">capacityProvidersWeight</a></code> | <code>number</code> | The weight value for the capacity provider strategy. |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.createKmsExecCommandKey">createKmsExecCommandKey</a></code> | <code>boolean</code> | Whether to create a KMS key for execute command encryption. |
-| <code><a href="#@btc-embedded/cdk-extensions.EcsClusterProps.property.enableFargateSpotCapacityProvider">enableFargateSpotCapacityProvider</a></code> | <code>boolean</code> | Whether to enable Fargate Spot capacity provider. |
+Specifies whether the container is marked as privileged.
+
+When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user).
 
 ---
 
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.vpc"></a>
+##### `pseudoTerminal`<sup>Optional</sup> <a name="pseudoTerminal" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.pseudoTerminal"></a>
 
 ```typescript
-public readonly vpc: IVpc;
+public readonly pseudoTerminal: boolean;
 ```
 
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* boolean
+- *Default:* false
 
-The VPC in which to create the ECS cluster.
+When this parameter is true, a TTY is allocated.
+
+This parameter maps to Tty in the "Create a container section" of the
+Docker Remote API and the --tty option to `docker run`.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_pseudoterminal)
 
 ---
 
-##### `capacityProvidersBase`<sup>Optional</sup> <a name="capacityProvidersBase" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersBase"></a>
+##### `readonlyRootFilesystem`<sup>Optional</sup> <a name="readonlyRootFilesystem" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.readonlyRootFilesystem"></a>
 
 ```typescript
-public readonly capacityProvidersBase: number;
+public readonly readonlyRootFilesystem: boolean;
 ```
 
-- *Type:* number
+- *Type:* boolean
+- *Default:* false
 
-The base value for the capacity provider strategy.
+When this parameter is true, the container is given read-only access to its root file system.
 
 ---
 
-##### `capacityProvidersWeight`<sup>Optional</sup> <a name="capacityProvidersWeight" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.capacityProvidersWeight"></a>
+##### `restartAttemptPeriod`<sup>Optional</sup> <a name="restartAttemptPeriod" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.restartAttemptPeriod"></a>
 
 ```typescript
-public readonly capacityProvidersWeight: number;
+public readonly restartAttemptPeriod: Duration;
 ```
 
-- *Type:* number
+- *Type:* aws-cdk-lib.Duration
+- *Default:* Duration.seconds(300) if `enableRestartPolicy` is true, otherwise no period.
 
-The weight value for the capacity provider strategy.
+A period of time that the container must run for before a restart can be attempted.
+
+A container can be restarted only once every `restartAttemptPeriod` seconds.
+If a container isn't able to run for this time period and exits early, it will not be restarted.
+
+This property can't be used if `enableRestartPolicy` is set to false.
+
+You can set a minimum `restartAttemptPeriod` of 60 seconds and a maximum `restartAttemptPeriod`
+of 1800 seconds.
 
 ---
 
-##### `createKmsExecCommandKey`<sup>Optional</sup> <a name="createKmsExecCommandKey" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.createKmsExecCommandKey"></a>
+##### `restartIgnoredExitCodes`<sup>Optional</sup> <a name="restartIgnoredExitCodes" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.restartIgnoredExitCodes"></a>
 
 ```typescript
-public readonly createKmsExecCommandKey: boolean;
+public readonly restartIgnoredExitCodes: number[];
 ```
 
-- *Type:* boolean
+- *Type:* number[]
+- *Default:* No exit codes are ignored.
 
-Whether to create a KMS key for execute command encryption.
+A list of exit codes that Amazon ECS will ignore and not attempt a restart on.
+
+This property can't be used if `enableRestartPolicy` is set to false.
+
+You can specify a maximum of 50 container exit codes.
 
 ---
 
-##### `enableFargateSpotCapacityProvider`<sup>Optional</sup> <a name="enableFargateSpotCapacityProvider" id="@btc-embedded/cdk-extensions.EcsClusterProps.property.enableFargateSpotCapacityProvider"></a>
+##### `secrets`<sup>Optional</sup> <a name="secrets" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.secrets"></a>
 
 ```typescript
-public readonly enableFargateSpotCapacityProvider: boolean;
+public readonly secrets: {[ key: string ]: Secret};
 ```
 
-- *Type:* boolean
+- *Type:* {[ key: string ]: aws-cdk-lib.aws_ecs.Secret}
+- *Default:* No secret environment variables.
 
-Whether to enable Fargate Spot capacity provider.
+The secret environment variables to pass to the container.
 
 ---
 
-### EfsFileSystemLookupOptions <a name="EfsFileSystemLookupOptions" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions"></a>
-
-Lookup options for importing a filesystem from the base stack.
-
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.Initializer"></a>
+##### `startTimeout`<sup>Optional</sup> <a name="startTimeout" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.startTimeout"></a>
 
 ```typescript
-import { EfsFileSystemLookupOptions } from '@btc-embedded/cdk-extensions'
-
-const efsFileSystemLookupOptions: EfsFileSystemLookupOptions = { ... }
+public readonly startTimeout: Duration;
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* aws-cdk-lib.Duration
+- *Default:* none
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.filesystemName">filesystemName</a></code> | <code>string</code> | The name of the filesystem to be imported. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.basePlatformStackName">basePlatformStackName</a></code> | <code>string</code> | The name of the base platform stack. |
+Time duration (in seconds) to wait before giving up on resolving dependencies for a container.
 
 ---
 
-##### `filesystemName`<sup>Required</sup> <a name="filesystemName" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.filesystemName"></a>
+##### `stopTimeout`<sup>Optional</sup> <a name="stopTimeout" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.stopTimeout"></a>
 
 ```typescript
-public readonly filesystemName: string;
+public readonly stopTimeout: Duration;
 ```
 
-- *Type:* string
+- *Type:* aws-cdk-lib.Duration
+- *Default:* none
 
-The name of the filesystem to be imported.
+Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own.
 
 ---
 
-##### `basePlatformStackName`<sup>Optional</sup> <a name="basePlatformStackName" id="@btc-embedded/cdk-extensions.EfsFileSystemLookupOptions.property.basePlatformStackName"></a>
+##### `systemControls`<sup>Optional</sup> <a name="systemControls" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.systemControls"></a>
 
 ```typescript
-public readonly basePlatformStackName: string;
+public readonly systemControls: SystemControl[];
 ```
 
-- *Type:* string
+- *Type:* aws-cdk-lib.aws_ecs.SystemControl[]
+- *Default:* No system controls are set.
 
-The name of the base platform stack.
+A list of namespaced kernel parameters to set in the container.
 
----
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_systemcontrols)
 
-### EfsFileSystemProps <a name="EfsFileSystemProps" id="@btc-embedded/cdk-extensions.EfsFileSystemProps"></a>
+---
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.Initializer"></a>
+##### `ulimits`<sup>Optional</sup> <a name="ulimits" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.ulimits"></a>
 
 ```typescript
-import { EfsFileSystemProps } from '@btc-embedded/cdk-extensions'
-
-const efsFileSystemProps: EfsFileSystemProps = { ... }
+public readonly ulimits: Ulimit[];
 ```
 
-#### Properties <a name="Properties" id="Properties"></a>
+- *Type:* aws-cdk-lib.aws_ecs.Ulimit[]
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.name">name</a></code> | <code>string</code> | The name to be used for the filesystem. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.vpc">vpc</a></code> | <code>aws-cdk-lib.aws_ec2.IVpc</code> | The VPC to be used. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.automaticBackups">automaticBackups</a></code> | <code>boolean</code> | Enable automatic backups. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsFileSystemProps.property.removalPolicy">removalPolicy</a></code> | <code>aws-cdk-lib.RemovalPolicy</code> | Removal policy. |
+An array of ulimits to set in the container.
 
 ---
 
-##### `name`<sup>Required</sup> <a name="name" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.name"></a>
+##### `user`<sup>Optional</sup> <a name="user" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.user"></a>
 
 ```typescript
-public readonly name: string;
+public readonly user: string;
 ```
 
 - *Type:* string
+- *Default:* root
 
-The name to be used for the filesystem.
+The user to use inside the container.
 
-Has to be unique in the stack.
-Is also used for importing the filesystem from another stack.
+This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
+
+> [https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#ContainerDefinition-user)
 
 ---
 
-##### `vpc`<sup>Required</sup> <a name="vpc" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.vpc"></a>
+##### `versionConsistency`<sup>Optional</sup> <a name="versionConsistency" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.versionConsistency"></a>
 
 ```typescript
-public readonly vpc: IVpc;
+public readonly versionConsistency: VersionConsistency;
 ```
 
-- *Type:* aws-cdk-lib.aws_ec2.IVpc
+- *Type:* aws-cdk-lib.aws_ecs.VersionConsistency
+- *Default:* VersionConsistency.DISABLED if `image` is a CDK asset, VersionConsistency.ENABLED otherwise
 
-The VPC to be used.
+Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest.
+
+If you set the value for a container as disabled, Amazon ECS will
+not resolve the provided container image tag to a digest and will use the
+original image URI specified in the container definition for deployment.
+
+> [https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-versionconsistency)
 
 ---
 
-##### `automaticBackups`<sup>Optional</sup> <a name="automaticBackups" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.automaticBackups"></a>
+##### `workingDirectory`<sup>Optional</sup> <a name="workingDirectory" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.workingDirectory"></a>
 
 ```typescript
-public readonly automaticBackups: boolean;
+public readonly workingDirectory: string;
 ```
 
-- *Type:* boolean
-
-Enable automatic backups.
+- *Type:* string
+- *Default:* /
 
-Default: `false`.
+The working directory in which to run commands inside the container.
 
 ---
 
-##### `removalPolicy`<sup>Optional</sup> <a name="removalPolicy" id="@btc-embedded/cdk-extensions.EfsFileSystemProps.property.removalPolicy"></a>
+##### `containerDependencies`<sup>Optional</sup> <a name="containerDependencies" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.containerDependencies"></a>
 
 ```typescript
-public readonly removalPolicy: RemovalPolicy;
+public readonly containerDependencies: ContainerDependency[];
 ```
 
-- *Type:* aws-cdk-lib.RemovalPolicy
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ContainerDependency">ContainerDependency</a>[]
 
-Removal policy.
+Container dependencies (used by ExtraContainerExtension).
 
-Default: {@link RemovalPolicy.DESTROY}.
+Specify additional container dependencies which should be added after the
+container has been created in the task definition.
 
 ---
 
-### EfsMountExtensionProperties <a name="EfsMountExtensionProperties" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties"></a>
+##### `healthCheckEndpoint`<sup>Optional</sup> <a name="healthCheckEndpoint" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.healthCheckEndpoint"></a>
 
-EFS extension properties.
+```typescript
+public readonly healthCheckEndpoint: string;
+```
 
-#### Initializer <a name="Initializer" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.Initializer"></a>
+- *Type:* string
+- *Default:* no health check
 
-```typescript
-import { EfsMountExtensionProperties } from '@btc-embedded/cdk-extensions'
+Simplified health check - just specify the HTTP endpoint path.
 
-const efsMountExtensionProperties: EfsMountExtensionProperties = { ... }
-```
+A curl-based health check will be auto-generated using the container's traffic port.
 
-#### Properties <a name="Properties" id="Properties"></a>
+Example: "/health" becomes:
+  curl -f http://localhost:3000/health || exit 1
 
-| **Name** | **Type** | **Description** |
-| --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.accessMode">accessMode</a></code> | <code><a href="#@btc-embedded/cdk-extensions.EfsAccessMode">EfsAccessMode</a></code> | The access mode for the filesystem for this service. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.filesystem">filesystem</a></code> | <code><a href="#@btc-embedded/cdk-extensions.IEfsFileSystem">IEfsFileSystem</a></code> | The filesystem to be mounted. |
-| <code><a href="#@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.path">path</a></code> | <code>string</code> | The path to mount the EFS to. |
+Cannot be used with `healthCheck`.
 
 ---
 
-##### `accessMode`<sup>Required</sup> <a name="accessMode" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.accessMode"></a>
+##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.logGroup"></a>
 
 ```typescript
-public readonly accessMode: EfsAccessMode;
+public readonly logGroup: ILogGroup;
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.EfsAccessMode">EfsAccessMode</a>
+- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+- *Default:* A log group is automatically created for you if the `ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER` feature flag is set.
 
-The access mode for the filesystem for this service.
+The log group into which application container logs should be routed.
 
 ---
 
-##### `filesystem`<sup>Required</sup> <a name="filesystem" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.filesystem"></a>
+##### `memoryMiB`<sup>Optional</sup> <a name="memoryMiB" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.memoryMiB"></a>
 
 ```typescript
-public readonly filesystem: IEfsFileSystem;
+public readonly memoryMiB: number;
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.IEfsFileSystem">IEfsFileSystem</a>
+- *Type:* number
 
-The filesystem to be mounted.
+How much memory in megabytes the container requires.
 
 ---
 
-##### `path`<sup>Required</sup> <a name="path" id="@btc-embedded/cdk-extensions.EfsMountExtensionProperties.property.path"></a>
+##### `trafficPort`<sup>Optional</sup> <a name="trafficPort" id="@btc-embedded/cdk-extensions.EnhancedContainerProps.property.trafficPort"></a>
 
 ```typescript
-public readonly path: string;
+public readonly trafficPort: number;
 ```
 
-- *Type:* string
+- *Type:* number
 
-The path to mount the EFS to.
+What port the image listens for traffic on.
 
 ---
 
@@ -11240,8 +12017,8 @@ const extraContainerExtensionProps: ExtraContainerExtensionProps = { ... }
 
 | **Name** | **Type** | **Description** |
 | --- | --- | --- |
-| <code><a href="#@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.container">container</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ContainerProps">ContainerProps</a></code> | *No description.* |
-| <code><a href="#@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.dbAccess">dbAccess</a></code> | <code>boolean</code> | *No description.* |
+| <code><a href="#@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.container">container</a></code> | <code><a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps">EnhancedContainerProps</a></code> | Container configuration using the enhanced container properties. |
+| <code><a href="#@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.dbAccess">dbAccess</a></code> | <code>boolean</code> | Whether this container needs database access. |
 | <code><a href="#@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.healthCheckCondition">healthCheckCondition</a></code> | <code>aws-cdk-lib.aws_ecs.ContainerDependencyCondition</code> | Specify the condition when this container should be considered healthy such that the main container can start. |
 
 ---
@@ -11249,10 +12026,12 @@ const extraContainerExtensionProps: ExtraContainerExtensionProps = { ... }
 ##### `container`<sup>Required</sup> <a name="container" id="@btc-embedded/cdk-extensions.ExtraContainerExtensionProps.property.container"></a>
 
 ```typescript
-public readonly container: ContainerProps;
+public readonly container: EnhancedContainerProps;
 ```
 
-- *Type:* <a href="#@btc-embedded/cdk-extensions.ContainerProps">ContainerProps</a>
+- *Type:* <a href="#@btc-embedded/cdk-extensions.EnhancedContainerProps">EnhancedContainerProps</a>
+
+Container configuration using the enhanced container properties.
 
 ---
 
@@ -11263,6 +12042,9 @@ public readonly dbAccess: boolean;
 ```
 
 - *Type:* boolean
+- *Default:* false
+
+Whether this container needs database access.
 
 ---
 
@@ -11273,11 +12055,10 @@ public readonly healthCheckCondition: ContainerDependencyCondition;
 ```
 
 - *Type:* aws-cdk-lib.aws_ecs.ContainerDependencyCondition
+- *Default:* ContainerDependencyCondition.HEALTHY
 
 Specify the condition when this container should be considered healthy such that the main container can start.
 
-Defaults to ContainerDependencyCondition.HEALTHY.
-
 ---
 
 ### FilterEqualsIgnoreCase <a name="FilterEqualsIgnoreCase" id="@btc-embedded/cdk-extensions.FilterEqualsIgnoreCase"></a>
@@ -12954,6 +13735,287 @@ public readonly props: ApiGatewayExtensionProps;
 ---
 
 
+### ApplicationContainer <a name="ApplicationContainer" id="@btc-embedded/cdk-extensions.ApplicationContainer"></a>
+
+An application container with built-in support for simplified health checks and all container definition options.
+
+This extension extends the upstream Container class and provides:
+1. Simplified health check API via `healthCheckEndpoint`
+2. Full access to all ContainerDefinitionOptions (user, privileged, workingDirectory, etc.)
+3. Drop-in replacement for Container with additional features
+
+**Replaces the need for:** Container + ModifyContainerDefinitionExtension
+
+*Example*
+
+```typescript
+// Full health check control (escape hatch)
+new ApplicationContainer({
+  cpu: 1024,
+  memoryMiB: 2048,
+  image: EcrImage.fromDockerImageAsset(image),
+  trafficPort: 3000,
+  healthCheck: {
+    command: ['CMD-SHELL', 'custom-health-check.sh'],
+    interval: Duration.seconds(30),
+  },
+});
+```
+
+
+#### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationContainer.Initializer"></a>
+
+```typescript
+import { ApplicationContainer } from '@btc-embedded/cdk-extensions'
+
+new ApplicationContainer(props: ApplicationContainerProps)
+```
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.Initializer.parameter.props">props</a></code> | <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps">ApplicationContainerProps</a></code> | The settings for the container. |
+
+---
+
+##### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationContainer.Initializer.parameter.props"></a>
+
+- *Type:* <a href="#@btc-embedded/cdk-extensions.ApplicationContainerProps">ApplicationContainerProps</a>
+
+The settings for the container.
+
+---
+
+#### Methods <a name="Methods" id="Methods"></a>
+
+| **Name** | **Description** |
+| --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.addContainerMutatingHook">addContainerMutatingHook</a></code> | This hook allows another service extension to register a mutating hook for changing the primary container of this extension. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.addHooks">addHooks</a></code> | A hook that allows the extension to add hooks to other extensions that are registered. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.connectToService">connectToService</a></code> | This hook allows the extension to establish a connection to extensions from another service. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.modifyServiceProps">modifyServiceProps</a></code> | Prior to launching the task definition as a service, this hook is called on each extension to give it a chance to mutate the properties of the service to be created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.modifyTaskDefinitionProps">modifyTaskDefinitionProps</a></code> | This is a hook which allows extensions to modify the settings of the task definition prior to it being created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.prehook">prehook</a></code> | A hook that is called for each extension ahead of time to allow for any initial setup, such as creating resources in advance. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.resolveContainerDependencies">resolveContainerDependencies</a></code> | Once all containers are added to the task definition, this hook is called for each extension to give it a chance to resolve its dependency graph so that its container starts in the right order based on the other extensions that were enabled. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.useService">useService</a></code> | When this hook is implemented by extension, it allows the extension to use the service which has been created. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.useTaskDefinition">useTaskDefinition</a></code> | Once the task definition is created, this hook is called for each extension to give it a chance to add containers to the task definition, change the task definition's role to add permissions, etc. |
+
+---
+
+##### `addContainerMutatingHook` <a name="addContainerMutatingHook" id="@btc-embedded/cdk-extensions.ApplicationContainer.addContainerMutatingHook"></a>
+
+```typescript
+public addContainerMutatingHook(hook: ContainerMutatingHook): void
+```
+
+This hook allows another service extension to register a mutating hook for changing the primary container of this extension.
+
+This is primarily used
+for the application extension. For example, the Firelens extension wants to
+be able to modify the settings of the application container to
+route logs through Firelens.
+
+###### `hook`<sup>Required</sup> <a name="hook" id="@btc-embedded/cdk-extensions.ApplicationContainer.addContainerMutatingHook.parameter.hook"></a>
+
+- *Type:* @aws-cdk-containers/ecs-service-extensions.ContainerMutatingHook
+
+---
+
+##### `addHooks` <a name="addHooks" id="@btc-embedded/cdk-extensions.ApplicationContainer.addHooks"></a>
+
+```typescript
+public addHooks(): void
+```
+
+A hook that allows the extension to add hooks to other extensions that are registered.
+
+##### `connectToService` <a name="connectToService" id="@btc-embedded/cdk-extensions.ApplicationContainer.connectToService"></a>
+
+```typescript
+public connectToService(service: Service, connectToProps?: ConnectToProps): void
+```
+
+This hook allows the extension to establish a connection to extensions from another service.
+
+Usually used for things like
+allowing one service to talk to the load balancer or service mesh
+proxy for another service.
+
+###### `service`<sup>Required</sup> <a name="service" id="@btc-embedded/cdk-extensions.ApplicationContainer.connectToService.parameter.service"></a>
+
+- *Type:* @aws-cdk-containers/ecs-service-extensions.Service
+
+The other service to connect to.
+
+---
+
+###### `connectToProps`<sup>Optional</sup> <a name="connectToProps" id="@btc-embedded/cdk-extensions.ApplicationContainer.connectToService.parameter.connectToProps"></a>
+
+- *Type:* @aws-cdk-containers/ecs-service-extensions.ConnectToProps
+
+---
+
+##### `modifyServiceProps` <a name="modifyServiceProps" id="@btc-embedded/cdk-extensions.ApplicationContainer.modifyServiceProps"></a>
+
+```typescript
+public modifyServiceProps(props: ServiceBuild): ServiceBuild
+```
+
+Prior to launching the task definition as a service, this hook is called on each extension to give it a chance to mutate the properties of the service to be created.
+
+###### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationContainer.modifyServiceProps.parameter.props"></a>
+
+- *Type:* @aws-cdk-containers/ecs-service-extensions.ServiceBuild
+
+The service properties to mutate.
+
+---
+
+##### `modifyTaskDefinitionProps` <a name="modifyTaskDefinitionProps" id="@btc-embedded/cdk-extensions.ApplicationContainer.modifyTaskDefinitionProps"></a>
+
+```typescript
+public modifyTaskDefinitionProps(props: TaskDefinitionProps): TaskDefinitionProps
+```
+
+This is a hook which allows extensions to modify the settings of the task definition prior to it being created.
+
+For example, the App Mesh
+extension needs to configure an Envoy proxy in the task definition,
+or the Application extension wants to set the overall resource for
+the task.
+
+###### `props`<sup>Required</sup> <a name="props" id="@btc-embedded/cdk-extensions.ApplicationContainer.modifyTaskDefinitionProps.parameter.props"></a>
+
+- *Type:* aws-cdk-lib.aws_ecs.TaskDefinitionProps
+
+---
+
+##### `prehook` <a name="prehook" id="@btc-embedded/cdk-extensions.ApplicationContainer.prehook"></a>
+
+```typescript
+public prehook(service: Service, scope: Construct): void
+```
+
+A hook that is called for each extension ahead of time to allow for any initial setup, such as creating resources in advance.
+
+###### `service`<sup>Required</sup> <a name="service" id="@btc-embedded/cdk-extensions.ApplicationContainer.prehook.parameter.service"></a>
+
+- *Type:* @aws-cdk-containers/ecs-service-extensions.Service
+
+---
+
+###### `scope`<sup>Required</sup> <a name="scope" id="@btc-embedded/cdk-extensions.ApplicationContainer.prehook.parameter.scope"></a>
+
+- *Type:* constructs.Construct
+
+---
+
+##### `resolveContainerDependencies` <a name="resolveContainerDependencies" id="@btc-embedded/cdk-extensions.ApplicationContainer.resolveContainerDependencies"></a>
+
+```typescript
+public resolveContainerDependencies(): void
+```
+
+Once all containers are added to the task definition, this hook is called for each extension to give it a chance to resolve its dependency graph so that its container starts in the right order based on the other extensions that were enabled.
+
+##### `useService` <a name="useService" id="@btc-embedded/cdk-extensions.ApplicationContainer.useService"></a>
+
+```typescript
+public useService(service: Ec2Service | FargateService): void
+```
+
+When this hook is implemented by extension, it allows the extension to use the service which has been created.
+
+It is generally used to
+create any final resources which might depend on the service itself.
+
+###### `service`<sup>Required</sup> <a name="service" id="@btc-embedded/cdk-extensions.ApplicationContainer.useService.parameter.service"></a>
+
+- *Type:* aws-cdk-lib.aws_ecs.Ec2Service | aws-cdk-lib.aws_ecs.FargateService
+
+The generated service.
+
+---
+
+##### `useTaskDefinition` <a name="useTaskDefinition" id="@btc-embedded/cdk-extensions.ApplicationContainer.useTaskDefinition"></a>
+
+```typescript
+public useTaskDefinition(taskDefinition: TaskDefinition): void
+```
+
+Once the task definition is created, this hook is called for each extension to give it a chance to add containers to the task definition, change the task definition's role to add permissions, etc.
+
+###### `taskDefinition`<sup>Required</sup> <a name="taskDefinition" id="@btc-embedded/cdk-extensions.ApplicationContainer.useTaskDefinition.parameter.taskDefinition"></a>
+
+- *Type:* aws-cdk-lib.aws_ecs.TaskDefinition
+
+---
+
+
+#### Properties <a name="Properties" id="Properties"></a>
+
+| **Name** | **Type** | **Description** |
+| --- | --- | --- |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.property.name">name</a></code> | <code>string</code> | The name of the extension. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.property.container">container</a></code> | <code>aws-cdk-lib.aws_ecs.ContainerDefinition</code> | The container for this extension. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.property.trafficPort">trafficPort</a></code> | <code>number</code> | The port on which the container expects to receive network traffic. |
+| <code><a href="#@btc-embedded/cdk-extensions.ApplicationContainer.property.logGroup">logGroup</a></code> | <code>aws-cdk-lib.aws_logs.ILogGroup</code> | The log group into which application container logs should be routed. |
+
+---
+
+##### `name`<sup>Required</sup> <a name="name" id="@btc-embedded/cdk-extensions.ApplicationContainer.property.name"></a>
+
+```typescript
+public readonly name: string;
+```
+
+- *Type:* string
+
+The name of the extension.
+
+---
+
+##### `container`<sup>Optional</sup> <a name="container" id="@btc-embedded/cdk-extensions.ApplicationContainer.property.container"></a>
+
+```typescript
+public readonly container: ContainerDefinition;
+```
+
+- *Type:* aws-cdk-lib.aws_ecs.ContainerDefinition
+
+The container for this extension.
+
+Most extensions have a container, but not
+every extension is required to have a container. Some extensions may just
+modify the properties of the service, or create external resources
+connected to the service.
+
+---
+
+##### `trafficPort`<sup>Required</sup> <a name="trafficPort" id="@btc-embedded/cdk-extensions.ApplicationContainer.property.trafficPort"></a>
+
+```typescript
+public readonly trafficPort: number;
+```
+
+- *Type:* number
+
+The port on which the container expects to receive network traffic.
+
+---
+
+##### `logGroup`<sup>Optional</sup> <a name="logGroup" id="@btc-embedded/cdk-extensions.ApplicationContainer.property.logGroup"></a>
+
+```typescript
+public readonly logGroup: ILogGroup;
+```
+
+- *Type:* aws-cdk-lib.aws_logs.ILogGroup
+
+The log group into which application container logs should be routed.
+
+---
+
+
 ### ApplicationLoadBalancerExtension <a name="ApplicationLoadBalancerExtension" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtension"></a>
 
 #### Initializers <a name="Initializers" id="@btc-embedded/cdk-extensions.ApplicationLoadBalancerExtension.Initializer"></a>