@guardian/cdk 50.6.1 → 50.6.2

package/lib/constructs/ecs/ecs-task.d.ts

@@ -1,4 +1,4 @@
-import type { ISecurityGroup, IVpc } from "aws-cdk-lib/aws-ec2";
+import type { ISecurityGroup, ISubnet, IVpc } from "aws-cdk-lib/aws-ec2";
 import type { IRepository } from "aws-cdk-lib/aws-ecr";
 import type { PolicyStatement } from "aws-cdk-lib/aws-iam";
 import { StateMachine } from "aws-cdk-lib/aws-stepfunctions";
@@ -95,6 +95,7 @@ export interface GuEcsTaskProps extends AppIdentity {
     customTaskPolicies?: PolicyStatement[];
     environmentOverrides?: TaskEnvironmentVariable[];
     storage?: number;
+    subnets?: ISubnet[];
 }
 /**
  * Pattern which creates all of the resources needed for a fargate task
@@ -105,6 +106,8 @@ export interface GuEcsTaskProps extends AppIdentity {
  *
  * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuLambda`]] instead. This
  * pattern was mainly created to work around the 15 minute lambda timeout.
+ *
+ * If the `subnets` prop is not defined, the task will run in a private subnet by default.
  */
 export declare class GuEcsTask extends Construct {
     stateMachine: StateMachine;

package/lib/constructs/ecs/ecs-task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ecs-task.d.ts","sourceRoot":"","sources":["../../../src/constructs/ecs/ecs-task.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAgC,YAAY,EAAW,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,WAAW,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,GAAG,EAAE,IAAI,CAAC;IACV,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,YAAY,GAAG,wBAAwB,CAAC;IACjE,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAcD;;;;;;;;;GASG;AACH,qBAAa,SAAU,SAAQ,SAAS;IACtC,YAAY,EAAE,YAAY,CAAC;gBAEf,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc;CAiI9D"}
+{"version":3,"file":"ecs-task.d.ts","sourceRoot":"","sources":["../../../src/constructs/ecs/ecs-task.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAgC,YAAY,EAAW,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAItC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,EAAE,WAAW,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,GAAG,EAAE,IAAI,CAAC;IACV,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,YAAY,GAAG,wBAAwB,CAAC;IACjE,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;CACrB;AAcD;;;;;;;;;;;GAWG;AACH,qBAAa,SAAU,SAAQ,SAAS;IACtC,YAAY,EAAE,YAAY,CAAC;gBAEf,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc;CAmI9D"}

package/lib/constructs/ecs/ecs-task.js

@@ -10,6 +10,7 @@ const aws_stepfunctions_1 = require("aws-cdk-lib/aws-stepfunctions");
 const aws_stepfunctions_tasks_1 = require("aws-cdk-lib/aws-stepfunctions-tasks");
 const constructs_1 = require("constructs");
 const core_1 = require("../core");
+const ec2_1 = require("../ec2");
 const iam_1 = require("../iam");
 /**
  * Containers can be specified either via a repository and version or by container id (in which case it will
@@ -32,6 +33,8 @@ const getContainer = (config) => {
  *
  * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuLambda`]] instead. This
  * pattern was mainly created to work around the 15 minute lambda timeout.
+ *
+ * If the `subnets` prop is not defined, the task will run in a private subnet by default.
  */
 class GuEcsTask extends constructs_1.Construct {
     constructor(scope, id, props) {
@@ -41,7 +44,7 @@ class GuEcsTask extends constructs_1.Construct {
         cpu = 2048, // 2 cores and from 4-16GB memory
         memory = 4096, // 4GB
         storage, // default is 20 GB when not provided in props
-        containerConfiguration, taskCommand, taskTimeoutInMinutes = 15, customTaskPolicies, vpc, monitoringConfiguration, securityGroups = [], environmentOverrides, } = props;
+        containerConfiguration, taskCommand, taskTimeoutInMinutes = 15, customTaskPolicies, vpc, subnets = ec2_1.GuVpc.subnetsFromParameter(scope, { type: ec2_1.SubnetType.PRIVATE, app }), monitoringConfiguration, securityGroups = [], environmentOverrides, } = props;
         if (storage && storage < 21) {
             throw new Error("Storage must be at least 21. See https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-ephemeralstorage.html");
         }
@@ -74,6 +77,7 @@ class GuEcsTask extends constructs_1.Construct {
         (customTaskPolicies ?? []).forEach((p) => taskDefinition.addToTaskRolePolicy(p));
         const task = new aws_stepfunctions_tasks_1.EcsRunTask(scope, `${id}-task`, {
             cluster,
+            subnets: { subnets },
             launchTarget: new aws_stepfunctions_tasks_1.EcsFargateLaunchTarget({
                 platformVersion: aws_ecs_1.FargatePlatformVersion.LATEST,
             }),

package/lib/constructs/ecs/ecs-task.js.map

@@ -1 +1 @@
-{"version":3,"file":"ecs-task.js","sourceRoot":"","sources":["../../../src/constructs/ecs/ecs-task.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAClD,+DAAqE;AACrE,+EAA+D;AAG/D,iDAO6B;AAE7B,iDAA4C;AAC5C,qEAAoG;AAEpG,iFAAyF;AACzF,2CAAuC;AAGvC,kCAAsC;AACtC,gCAA2D;AA8F3D;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,MAA8B,EAAE,EAAE;IACtD,IAAI,MAAM,CAAC,IAAI,IAAI,YAAY,EAAE;QAC/B,OAAO,wBAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;KAC5E;SAAM;QACL,OAAO,wBAAc,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,cAAc,CAAC,CAAC;KACjE;AACH,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAa,SAAU,SAAQ,sBAAS;IAGtC,YAAY,KAAc,EAAE,EAAU,EAAE,KAAqB;QAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,EACJ,GAAG;QAEH,iJAAiJ;QACjJ,GAAG,GAAG,IAAI,EAAE,iCAAiC;QAC7C,MAAM,GAAG,IAAI,EAAE,MAAM;QACrB,OAAO,EAAE,8CAA8C;QACvD,sBAAsB,EACtB,WAAW,EACX,oBAAoB,GAAG,EAAE,EACzB,kBAAkB,EAClB,GAAG,EACH,uBAAuB,EACvB,cAAc,GAAG,EAAE,EACnB,oBAAoB,GACrB,GAAG,KAAK,CAAC;QAEV,IAAI,OAAO,IAAI,OAAO,GAAG,EAAE,EAAE;YAC3B,MAAM,IAAI,KAAK,CACb,yJAAyJ,CAC1J,CAAC;SACH;QAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE;YAClD,WAAW,EAAE,GAAG,GAAG,YAAY,KAAK,EAAE;YACtC,8BAA8B,EAAE,IAAI;YACpC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE;YACvE,aAAa,EAAE,uBAAa,CAAC,OAAO;YACpC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,GAAG,KAAK,IAAI,KAAK,IAAI,GAAG,EAAE;YAClC,mBAAmB,EAAE,OAAO;SAC7B,CAAC,CAAC;QAEH,MAAM,mBAAmB,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE;YAC7E,KAAK,EAAE,YAAY,CAAC,sBAAsB,CAAC;YAC3C,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YACjD,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACtD,GAAG;YACH,cAAc,EAAE,MAAM;YACtB,OAAO,EAAE,oBAAU,CAAC,OAAO,CAAC;gBAC1B,YAAY,EAAE,GAAG;gBACjB,YAAY,EAAE,EAAE;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,uCAAiC,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEzE,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjF,MAAM,IAAI,GAAG,IAAI,oCAAU,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;YAC/C,OAAO;YACP,YAAY,EAAE,IAAI,gDAAsB,CAAC;gBACvC,eAAe,EAAE,gCAAsB,CAAC,MAAM;aAC/C,CAAC;YACF,cAAc;YACd,kBAAkB,EAAE,sCAAkB,CAAC,OAAO;YAC9C,UAAU,EAAE,4BAAQ,CAAC,OAAO;YAC5B,WAAW,EAAE,2BAAO,CAAC,QAAQ,CAAC,sBAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACrE,cAAc;YACd,kBAAkB,EAAE;gBAClB;oBACE,mBAAmB,EAAE,mBAAmB;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;aACF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,gCAAY,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE;YAChE,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE;YACzC,MAAM,UAAU,GAAG,eAAK,CAAC,YAAY,CACnC,KAAK,EACL,kBAAW,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,EAC3C,uBAAuB,CAAC,WAAW,CACpC,CAAC;YACF,MAAM,MAAM,GAAG;gBACb;oBACE,IAAI,EAAE,GAAG,GAAG,mBAAmB;oBAC/B,WAAW,EAAE,GAAG,GAAG,IAAI,KAAK,cAAc;oBAC1C,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;wBACrC,MAAM,EAAE,sBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBACzB,SAAS,EAAE,KAAK;qBACjB,CAAC;iBACH;gBACD;oBACE,IAAI,EAAE,GAAG,GAAG,UAAU;oBACtB,WAAW,EAAE,GAAG,GAAG,IAAI,KAAK,iBAAiB;oBAC7C,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;wBACvC,MAAM,EAAE,sBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBACzB,SAAS,EAAE,KAAK;qBACjB,CAAC;iBACH;aACF,CAAC;YAEF,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC/C,MAAM,KAAK,GAAG,IAAI,sBAAK,CAAC,KAAK,EAAE,IAAI,EAAE;oBACnC,gBAAgB,EAAE,WAAW;oBAC7B,cAAc,EAAE,IAAI;oBACpB,MAAM,EAAE,MAAM;oBACd,kEAAkE;oBAClE,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,gBAAgB,EAAE,iCAAgB,CAAC,aAAa;iBACjD,CAAC,CAAC;gBACH,KAAK,CAAC,cAAc,CAAC,IAAI,kCAAS,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChD,kBAAW,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;SACJ;QAED,0CAA0C;QAC1C,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAW,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3G,IAAI,uBAAS,CAAC,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE;YAClD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;SACzC,CAAC,CAAC;IACL,CAAC;CACF;AApID,8BAoIC","sourcesContent":["import { CfnOutput, Duration } from \"aws-cdk-lib\";\nimport { Alarm, TreatMissingData } from \"aws-cdk-lib/aws-cloudwatch\";\nimport { SnsAction } from \"aws-cdk-lib/aws-cloudwatch-actions\";\nimport type { ISecurityGroup, IVpc } from \"aws-cdk-lib/aws-ec2\";\nimport type { IRepository } from \"aws-cdk-lib/aws-ecr\";\nimport {\n  Cluster,\n  Compatibility,\n  ContainerImage,\n  FargatePlatformVersion,\n  LogDrivers,\n  TaskDefinition,\n} from \"aws-cdk-lib/aws-ecs\";\nimport type { PolicyStatement } from \"aws-cdk-lib/aws-iam\";\nimport { Topic } from \"aws-cdk-lib/aws-sns\";\nimport { IntegrationPattern, JsonPath, StateMachine, Timeout } from \"aws-cdk-lib/aws-stepfunctions\";\nimport type { TaskEnvironmentVariable } from \"aws-cdk-lib/aws-stepfunctions-tasks\";\nimport { EcsFargateLaunchTarget, EcsRunTask } from \"aws-cdk-lib/aws-stepfunctions-tasks\";\nimport { Construct } from \"constructs\";\nimport type { NoMonitoring } from \"../cloudwatch\";\nimport type { GuStack } from \"../core\";\nimport { AppIdentity } from \"../core\";\nimport { GuGetDistributablePolicyStatement } from \"../iam\";\n\n/**\n * Configuration to determine what container to use for the task\n * For example, to run the task in the latest node container:\n *\n * ```typescript\n * const containerConfiguration = {\n *     id: 'node:latest'\n * }\n * ```\n *\n * Alternatively you can specify a repository and version, for example for an ECR repository:\n * ```typescript\n * import { Repository } from \"aws-cdk-lib/aws-ecr\";\n * const repository = new Repository(scope, `${app}-repository`, {\n    repositoryName: app,\n  });\n * const containerConfiguration = {\n *     repository: Repository.fromRepositoryArn(\"<repository arn>\"),\n *     version: '1'\n * }\n * ```\n */\n\nexport type RepositoryContainer = {\n  repository: IRepository;\n  version: string;\n  type: \"repository\";\n};\n\nexport type RegistryContainer = {\n  id?: string;\n  type: \"registry\";\n};\n\nexport type ContainerConfiguration = RepositoryContainer | RegistryContainer;\n\nexport type GuEcsTaskMonitoringProps = { snsTopicArn: string; noMonitoring: false };\n\n/**\n * Configuration options for the [[`GuEcsTask`]] pattern.\n *\n * See [[`ContainerConfiguration`]] for details of how to configure the container used to run the task.\n *\n * `taskTimeoutInMinutes` does what is says on the tin. The default timeout is 15 minutes.\n *\n * The `taskCommand` prop allows you to specify a command to run when the task starts (this can also be done via a CMD statement in\n * your Dockerfile). For example:\n *\n * const props = {\n *    //other props\n *    taskCommand: `aws s3 cp s3://${distbucket}/${stack}/${stage}/${app}/task.sh . && ./task.sh\n    }\n *\n * It is advisable to configure alarms for when the job fails/times out. To do this specify the alarmSnsTopicArn prop.\n *\n * `customTaskPolicies` allows your task to interact with other AWS services. By default a task\n * will have read access to the distribution bucket for your account.\n *\n * You can specify security groups to apply to task using the `securityGroups` prop.\n *\n * You can also set the memory and cpu units for your task. See https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size\n * for further details.\n *\n * If you want to pass input from the step function into your EcsTask you can do so via the `environmentOverrides` prop, which allows you to wire up\n * step function input JSON to environment variables set on the container. For example,\n * const props = {\n *  ...otherProps\n *   environmentOverrides: [\n      {\n        name: \"VERSION\",\n        value: JsonPath.stringAt(\"$.version\"),\n      },\n    }\n * With the above override, your task will attempt to find a `version` property in the JSON input passed to the step function, and apply it to the\n * VERSION environment variable. Alternatively, you could hard code a value for the variable in CDK.\n * See https://docs.aws.amazon.com/step-functions/latest/dg/connect-ecs.html for further detail and  other override options - this construct currently\n * only supports environment variables.\n */\nexport interface GuEcsTaskProps extends AppIdentity {\n  vpc: IVpc;\n  containerConfiguration: ContainerConfiguration;\n  taskTimeoutInMinutes?: number;\n  cpu?: number;\n  memory?: number;\n  taskCommand?: string;\n  monitoringConfiguration: NoMonitoring | GuEcsTaskMonitoringProps;\n  securityGroups?: ISecurityGroup[];\n  customTaskPolicies?: PolicyStatement[];\n  environmentOverrides?: TaskEnvironmentVariable[];\n  storage?: number;\n}\n\n/**\n * Containers can be specified either via a repository and version or by container id (in which case it will\n * be fetched from docker hub).\n */\nconst getContainer = (config: ContainerConfiguration) => {\n  if (config.type == \"repository\") {\n    return ContainerImage.fromEcrRepository(config.repository, config.version);\n  } else {\n    return ContainerImage.fromRegistry(config.id ?? \"ubuntu:focal\");\n  }\n};\n\n/**\n * Pattern which creates all of the resources needed for a fargate task\n *\n * The task will be wrapped in a step function to allow for easier triggering and alarming on failure.\n *\n * For all configuration options, see [[`GuEcsTaskProps`]].\n *\n * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuLambda`]] instead. This\n * pattern was mainly created to work around the 15 minute lambda timeout.\n */\nexport class GuEcsTask extends Construct {\n  stateMachine: StateMachine;\n\n  constructor(scope: GuStack, id: string, props: GuEcsTaskProps) {\n    super(scope, id);\n\n    const {\n      app,\n\n      // see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html#cfn-ecs-taskdefinition-cpu for details\n      cpu = 2048, // 2 cores and from 4-16GB memory\n      memory = 4096, // 4GB\n      storage, // default is 20 GB when not provided in props\n      containerConfiguration,\n      taskCommand,\n      taskTimeoutInMinutes = 15,\n      customTaskPolicies,\n      vpc,\n      monitoringConfiguration,\n      securityGroups = [],\n      environmentOverrides,\n    } = props;\n\n    if (storage && storage < 21) {\n      throw new Error(\n        \"Storage must be at least 21. See https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-ephemeralstorage.html\"\n      );\n    }\n\n    const { stack, stage } = scope;\n\n    const cluster = new Cluster(scope, `${id}-Cluster`, {\n      clusterName: `${app}-cluster-${stage}`,\n      enableFargateCapacityProviders: true,\n      vpc,\n    });\n\n    const taskDefinition = new TaskDefinition(scope, `${id}-TaskDefinition`, {\n      compatibility: Compatibility.FARGATE,\n      cpu: cpu.toString(),\n      memoryMiB: memory.toString(),\n      family: `${stack}-${stage}-${app}`,\n      ephemeralStorageGiB: storage,\n    });\n\n    const containerDefinition = taskDefinition.addContainer(`${id}-TaskContainer`, {\n      image: getContainer(containerConfiguration),\n      entryPoint: taskCommand ? [\"/bin/sh\"] : undefined,\n      command: taskCommand ? [\"-c\", taskCommand] : undefined, // if unset, falls back to CMD in docker file, or no command will be run\n      cpu,\n      memoryLimitMiB: memory,\n      logging: LogDrivers.awsLogs({\n        streamPrefix: app,\n        logRetention: 14,\n      }),\n    });\n\n    const distPolicy = new GuGetDistributablePolicyStatement(scope, { app });\n\n    taskDefinition.addToTaskRolePolicy(distPolicy);\n    (customTaskPolicies ?? []).forEach((p) => taskDefinition.addToTaskRolePolicy(p));\n\n    const task = new EcsRunTask(scope, `${id}-task`, {\n      cluster,\n      launchTarget: new EcsFargateLaunchTarget({\n        platformVersion: FargatePlatformVersion.LATEST,\n      }),\n      taskDefinition,\n      integrationPattern: IntegrationPattern.RUN_JOB,\n      resultPath: JsonPath.DISCARD,\n      taskTimeout: Timeout.duration(Duration.minutes(taskTimeoutInMinutes)),\n      securityGroups,\n      containerOverrides: [\n        {\n          containerDefinition: containerDefinition,\n          environment: environmentOverrides,\n        },\n      ],\n    });\n\n    this.stateMachine = new StateMachine(scope, `${id}-StateMachine`, {\n      definition: task,\n      stateMachineName: `${app}-${stage}`,\n    });\n\n    if (!monitoringConfiguration.noMonitoring) {\n      const alarmTopic = Topic.fromTopicArn(\n        scope,\n        AppIdentity.suffixText(props, \"AlarmTopic\"),\n        monitoringConfiguration.snsTopicArn\n      );\n      const alarms = [\n        {\n          name: `${app}-execution-failed`,\n          description: `${app}-${stage} job failed `,\n          metric: this.stateMachine.metricFailed({\n            period: Duration.hours(1),\n            statistic: \"sum\",\n          }),\n        },\n        {\n          name: `${app}-timeout`,\n          description: `${app}-${stage} job timed out `,\n          metric: this.stateMachine.metricTimedOut({\n            period: Duration.hours(1),\n            statistic: \"sum\",\n          }),\n        },\n      ];\n\n      alarms.forEach(({ name, description, metric }) => {\n        const alarm = new Alarm(scope, name, {\n          alarmDescription: description,\n          actionsEnabled: true,\n          metric: metric,\n          // default for comparisonOperator is GreaterThanOrEqualToThreshold\n          threshold: 1,\n          evaluationPeriods: 1,\n          treatMissingData: TreatMissingData.NOT_BREACHING,\n        });\n        alarm.addAlarmAction(new SnsAction(alarmTopic));\n        AppIdentity.taggedConstruct({ app }, alarm);\n      });\n    }\n\n    // Tag all constructs with correct app tag\n    [cluster, task, taskDefinition, this.stateMachine].forEach((c) => AppIdentity.taggedConstruct({ app }, c));\n\n    new CfnOutput(scope, `${id}-StateMachineArnOutput`, {\n      value: this.stateMachine.stateMachineArn,\n    });\n  }\n}\n"]}
+{"version":3,"file":"ecs-task.js","sourceRoot":"","sources":["../../../src/constructs/ecs/ecs-task.ts"],"names":[],"mappings":";;;AAAA,6CAAkD;AAClD,+DAAqE;AACrE,+EAA+D;AAG/D,iDAO6B;AAE7B,iDAA4C;AAC5C,qEAAoG;AAEpG,iFAAyF;AACzF,2CAAuC;AAGvC,kCAAsC;AACtC,gCAA2C;AAC3C,gCAA2D;AA+F3D;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,MAA8B,EAAE,EAAE;IACtD,IAAI,MAAM,CAAC,IAAI,IAAI,YAAY,EAAE;QAC/B,OAAO,wBAAc,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;KAC5E;SAAM;QACL,OAAO,wBAAc,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,cAAc,CAAC,CAAC;KACjE;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAa,SAAU,SAAQ,sBAAS;IAGtC,YAAY,KAAc,EAAE,EAAU,EAAE,KAAqB;QAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,EACJ,GAAG;QAEH,iJAAiJ;QACjJ,GAAG,GAAG,IAAI,EAAE,iCAAiC;QAC7C,MAAM,GAAG,IAAI,EAAE,MAAM;QACrB,OAAO,EAAE,8CAA8C;QACvD,sBAAsB,EACtB,WAAW,EACX,oBAAoB,GAAG,EAAE,EACzB,kBAAkB,EAClB,GAAG,EACH,OAAO,GAAG,WAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAC9E,uBAAuB,EACvB,cAAc,GAAG,EAAE,EACnB,oBAAoB,GACrB,GAAG,KAAK,CAAC;QAEV,IAAI,OAAO,IAAI,OAAO,GAAG,EAAE,EAAE;YAC3B,MAAM,IAAI,KAAK,CACb,yJAAyJ,CAC1J,CAAC;SACH;QAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE;YAClD,WAAW,EAAE,GAAG,GAAG,YAAY,KAAK,EAAE;YACtC,8BAA8B,EAAE,IAAI;YACpC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,wBAAc,CAAC,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE;YACvE,aAAa,EAAE,uBAAa,CAAC,OAAO;YACpC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,GAAG,KAAK,IAAI,KAAK,IAAI,GAAG,EAAE;YAClC,mBAAmB,EAAE,OAAO;SAC7B,CAAC,CAAC;QAEH,MAAM,mBAAmB,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE;YAC7E,KAAK,EAAE,YAAY,CAAC,sBAAsB,CAAC;YAC3C,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YACjD,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACtD,GAAG;YACH,cAAc,EAAE,MAAM;YACtB,OAAO,EAAE,oBAAU,CAAC,OAAO,CAAC;gBAC1B,YAAY,EAAE,GAAG;gBACjB,YAAY,EAAE,EAAE;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,uCAAiC,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEzE,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjF,MAAM,IAAI,GAAG,IAAI,oCAAU,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;YAC/C,OAAO;YACP,OAAO,EAAE,EAAE,OAAO,EAAE;YACpB,YAAY,EAAE,IAAI,gDAAsB,CAAC;gBACvC,eAAe,EAAE,gCAAsB,CAAC,MAAM;aAC/C,CAAC;YACF,cAAc;YACd,kBAAkB,EAAE,sCAAkB,CAAC,OAAO;YAC9C,UAAU,EAAE,4BAAQ,CAAC,OAAO;YAC5B,WAAW,EAAE,2BAAO,CAAC,QAAQ,CAAC,sBAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACrE,cAAc;YACd,kBAAkB,EAAE;gBAClB;oBACE,mBAAmB,EAAE,mBAAmB;oBACxC,WAAW,EAAE,oBAAoB;iBAClC;aACF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,gCAAY,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE;YAChE,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE;YACzC,MAAM,UAAU,GAAG,eAAK,CAAC,YAAY,CACnC,KAAK,EACL,kBAAW,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,EAC3C,uBAAuB,CAAC,WAAW,CACpC,CAAC;YACF,MAAM,MAAM,GAAG;gBACb;oBACE,IAAI,EAAE,GAAG,GAAG,mBAAmB;oBAC/B,WAAW,EAAE,GAAG,GAAG,IAAI,KAAK,cAAc;oBAC1C,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;wBACrC,MAAM,EAAE,sBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBACzB,SAAS,EAAE,KAAK;qBACjB,CAAC;iBACH;gBACD;oBACE,IAAI,EAAE,GAAG,GAAG,UAAU;oBACtB,WAAW,EAAE,GAAG,GAAG,IAAI,KAAK,iBAAiB;oBAC7C,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;wBACvC,MAAM,EAAE,sBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBACzB,SAAS,EAAE,KAAK;qBACjB,CAAC;iBACH;aACF,CAAC;YAEF,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC/C,MAAM,KAAK,GAAG,IAAI,sBAAK,CAAC,KAAK,EAAE,IAAI,EAAE;oBACnC,gBAAgB,EAAE,WAAW;oBAC7B,cAAc,EAAE,IAAI;oBACpB,MAAM,EAAE,MAAM;oBACd,kEAAkE;oBAClE,SAAS,EAAE,CAAC;oBACZ,iBAAiB,EAAE,CAAC;oBACpB,gBAAgB,EAAE,iCAAgB,CAAC,aAAa;iBACjD,CAAC,CAAC;gBACH,KAAK,CAAC,cAAc,CAAC,IAAI,kCAAS,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChD,kBAAW,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;SACJ;QAED,0CAA0C;QAC1C,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAW,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3G,IAAI,uBAAS,CAAC,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE;YAClD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;SACzC,CAAC,CAAC;IACL,CAAC;CACF;AAtID,8BAsIC","sourcesContent":["import { CfnOutput, Duration } from \"aws-cdk-lib\";\nimport { Alarm, TreatMissingData } from \"aws-cdk-lib/aws-cloudwatch\";\nimport { SnsAction } from \"aws-cdk-lib/aws-cloudwatch-actions\";\nimport type { ISecurityGroup, ISubnet, IVpc } from \"aws-cdk-lib/aws-ec2\";\nimport type { IRepository } from \"aws-cdk-lib/aws-ecr\";\nimport {\n  Cluster,\n  Compatibility,\n  ContainerImage,\n  FargatePlatformVersion,\n  LogDrivers,\n  TaskDefinition,\n} from \"aws-cdk-lib/aws-ecs\";\nimport type { PolicyStatement } from \"aws-cdk-lib/aws-iam\";\nimport { Topic } from \"aws-cdk-lib/aws-sns\";\nimport { IntegrationPattern, JsonPath, StateMachine, Timeout } from \"aws-cdk-lib/aws-stepfunctions\";\nimport type { TaskEnvironmentVariable } from \"aws-cdk-lib/aws-stepfunctions-tasks\";\nimport { EcsFargateLaunchTarget, EcsRunTask } from \"aws-cdk-lib/aws-stepfunctions-tasks\";\nimport { Construct } from \"constructs\";\nimport type { NoMonitoring } from \"../cloudwatch\";\nimport type { GuStack } from \"../core\";\nimport { AppIdentity } from \"../core\";\nimport { GuVpc, SubnetType } from \"../ec2\";\nimport { GuGetDistributablePolicyStatement } from \"../iam\";\n\n/**\n * Configuration to determine what container to use for the task\n * For example, to run the task in the latest node container:\n *\n * ```typescript\n * const containerConfiguration = {\n *     id: 'node:latest'\n * }\n * ```\n *\n * Alternatively you can specify a repository and version, for example for an ECR repository:\n * ```typescript\n * import { Repository } from \"aws-cdk-lib/aws-ecr\";\n * const repository = new Repository(scope, `${app}-repository`, {\n    repositoryName: app,\n  });\n * const containerConfiguration = {\n *     repository: Repository.fromRepositoryArn(\"<repository arn>\"),\n *     version: '1'\n * }\n * ```\n */\n\nexport type RepositoryContainer = {\n  repository: IRepository;\n  version: string;\n  type: \"repository\";\n};\n\nexport type RegistryContainer = {\n  id?: string;\n  type: \"registry\";\n};\n\nexport type ContainerConfiguration = RepositoryContainer | RegistryContainer;\n\nexport type GuEcsTaskMonitoringProps = { snsTopicArn: string; noMonitoring: false };\n\n/**\n * Configuration options for the [[`GuEcsTask`]] pattern.\n *\n * See [[`ContainerConfiguration`]] for details of how to configure the container used to run the task.\n *\n * `taskTimeoutInMinutes` does what is says on the tin. The default timeout is 15 minutes.\n *\n * The `taskCommand` prop allows you to specify a command to run when the task starts (this can also be done via a CMD statement in\n * your Dockerfile). For example:\n *\n * const props = {\n *    //other props\n *    taskCommand: `aws s3 cp s3://${distbucket}/${stack}/${stage}/${app}/task.sh . && ./task.sh\n    }\n *\n * It is advisable to configure alarms for when the job fails/times out. To do this specify the alarmSnsTopicArn prop.\n *\n * `customTaskPolicies` allows your task to interact with other AWS services. By default a task\n * will have read access to the distribution bucket for your account.\n *\n * You can specify security groups to apply to task using the `securityGroups` prop.\n *\n * You can also set the memory and cpu units for your task. See https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size\n * for further details.\n *\n * If you want to pass input from the step function into your EcsTask you can do so via the `environmentOverrides` prop, which allows you to wire up\n * step function input JSON to environment variables set on the container. For example,\n * const props = {\n *  ...otherProps\n *   environmentOverrides: [\n      {\n        name: \"VERSION\",\n        value: JsonPath.stringAt(\"$.version\"),\n      },\n    }\n * With the above override, your task will attempt to find a `version` property in the JSON input passed to the step function, and apply it to the\n * VERSION environment variable. Alternatively, you could hard code a value for the variable in CDK.\n * See https://docs.aws.amazon.com/step-functions/latest/dg/connect-ecs.html for further detail and  other override options - this construct currently\n * only supports environment variables.\n */\nexport interface GuEcsTaskProps extends AppIdentity {\n  vpc: IVpc;\n  containerConfiguration: ContainerConfiguration;\n  taskTimeoutInMinutes?: number;\n  cpu?: number;\n  memory?: number;\n  taskCommand?: string;\n  monitoringConfiguration: NoMonitoring | GuEcsTaskMonitoringProps;\n  securityGroups?: ISecurityGroup[];\n  customTaskPolicies?: PolicyStatement[];\n  environmentOverrides?: TaskEnvironmentVariable[];\n  storage?: number;\n  subnets?: ISubnet[];\n}\n\n/**\n * Containers can be specified either via a repository and version or by container id (in which case it will\n * be fetched from docker hub).\n */\nconst getContainer = (config: ContainerConfiguration) => {\n  if (config.type == \"repository\") {\n    return ContainerImage.fromEcrRepository(config.repository, config.version);\n  } else {\n    return ContainerImage.fromRegistry(config.id ?? \"ubuntu:focal\");\n  }\n};\n\n/**\n * Pattern which creates all of the resources needed for a fargate task\n *\n * The task will be wrapped in a step function to allow for easier triggering and alarming on failure.\n *\n * For all configuration options, see [[`GuEcsTaskProps`]].\n *\n * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuLambda`]] instead. This\n * pattern was mainly created to work around the 15 minute lambda timeout.\n *\n * If the `subnets` prop is not defined, the task will run in a private subnet by default.\n */\nexport class GuEcsTask extends Construct {\n  stateMachine: StateMachine;\n\n  constructor(scope: GuStack, id: string, props: GuEcsTaskProps) {\n    super(scope, id);\n\n    const {\n      app,\n\n      // see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html#cfn-ecs-taskdefinition-cpu for details\n      cpu = 2048, // 2 cores and from 4-16GB memory\n      memory = 4096, // 4GB\n      storage, // default is 20 GB when not provided in props\n      containerConfiguration,\n      taskCommand,\n      taskTimeoutInMinutes = 15,\n      customTaskPolicies,\n      vpc,\n      subnets = GuVpc.subnetsFromParameter(scope, { type: SubnetType.PRIVATE, app }),\n      monitoringConfiguration,\n      securityGroups = [],\n      environmentOverrides,\n    } = props;\n\n    if (storage && storage < 21) {\n      throw new Error(\n        \"Storage must be at least 21. See https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-ephemeralstorage.html\"\n      );\n    }\n\n    const { stack, stage } = scope;\n\n    const cluster = new Cluster(scope, `${id}-Cluster`, {\n      clusterName: `${app}-cluster-${stage}`,\n      enableFargateCapacityProviders: true,\n      vpc,\n    });\n\n    const taskDefinition = new TaskDefinition(scope, `${id}-TaskDefinition`, {\n      compatibility: Compatibility.FARGATE,\n      cpu: cpu.toString(),\n      memoryMiB: memory.toString(),\n      family: `${stack}-${stage}-${app}`,\n      ephemeralStorageGiB: storage,\n    });\n\n    const containerDefinition = taskDefinition.addContainer(`${id}-TaskContainer`, {\n      image: getContainer(containerConfiguration),\n      entryPoint: taskCommand ? [\"/bin/sh\"] : undefined,\n      command: taskCommand ? [\"-c\", taskCommand] : undefined, // if unset, falls back to CMD in docker file, or no command will be run\n      cpu,\n      memoryLimitMiB: memory,\n      logging: LogDrivers.awsLogs({\n        streamPrefix: app,\n        logRetention: 14,\n      }),\n    });\n\n    const distPolicy = new GuGetDistributablePolicyStatement(scope, { app });\n\n    taskDefinition.addToTaskRolePolicy(distPolicy);\n    (customTaskPolicies ?? []).forEach((p) => taskDefinition.addToTaskRolePolicy(p));\n\n    const task = new EcsRunTask(scope, `${id}-task`, {\n      cluster,\n      subnets: { subnets },\n      launchTarget: new EcsFargateLaunchTarget({\n        platformVersion: FargatePlatformVersion.LATEST,\n      }),\n      taskDefinition,\n      integrationPattern: IntegrationPattern.RUN_JOB,\n      resultPath: JsonPath.DISCARD,\n      taskTimeout: Timeout.duration(Duration.minutes(taskTimeoutInMinutes)),\n      securityGroups,\n      containerOverrides: [\n        {\n          containerDefinition: containerDefinition,\n          environment: environmentOverrides,\n        },\n      ],\n    });\n\n    this.stateMachine = new StateMachine(scope, `${id}-StateMachine`, {\n      definition: task,\n      stateMachineName: `${app}-${stage}`,\n    });\n\n    if (!monitoringConfiguration.noMonitoring) {\n      const alarmTopic = Topic.fromTopicArn(\n        scope,\n        AppIdentity.suffixText(props, \"AlarmTopic\"),\n        monitoringConfiguration.snsTopicArn\n      );\n      const alarms = [\n        {\n          name: `${app}-execution-failed`,\n          description: `${app}-${stage} job failed `,\n          metric: this.stateMachine.metricFailed({\n            period: Duration.hours(1),\n            statistic: \"sum\",\n          }),\n        },\n        {\n          name: `${app}-timeout`,\n          description: `${app}-${stage} job timed out `,\n          metric: this.stateMachine.metricTimedOut({\n            period: Duration.hours(1),\n            statistic: \"sum\",\n          }),\n        },\n      ];\n\n      alarms.forEach(({ name, description, metric }) => {\n        const alarm = new Alarm(scope, name, {\n          alarmDescription: description,\n          actionsEnabled: true,\n          metric: metric,\n          // default for comparisonOperator is GreaterThanOrEqualToThreshold\n          threshold: 1,\n          evaluationPeriods: 1,\n          treatMissingData: TreatMissingData.NOT_BREACHING,\n        });\n        alarm.addAlarmAction(new SnsAction(alarmTopic));\n        AppIdentity.taggedConstruct({ app }, alarm);\n      });\n    }\n\n    // Tag all constructs with correct app tag\n    [cluster, task, taskDefinition, this.stateMachine].forEach((c) => AppIdentity.taggedConstruct({ app }, c));\n\n    new CfnOutput(scope, `${id}-StateMachineArnOutput`, {\n      value: this.stateMachine.stateMachineArn,\n    });\n  }\n}\n"]}

package/lib/patterns/scheduled-ecs-task.d.ts

@@ -27,6 +27,8 @@ declare const GuScheduledEcsTask_base: {
  *
  * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuScheduledLambda`]] instead. This
  * pattern was mainly created to work around the 15 minute lambda timeout.
+ *
+ * If the `subnets` prop is not defined, the task will run in a private subnet by default.
  */
 export declare class GuScheduledEcsTask extends GuScheduledEcsTask_base {
     constructor(scope: GuStack, id: string, props: GuScheduledEcsTaskProps);

package/lib/patterns/scheduled-ecs-task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheduled-ecs-task.d.ts","sourceRoot":"","sources":["../../src/patterns/scheduled-ecs-task.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;;;;;;;OAOG;IACH,QAAQ,EAAE,QAAQ,CAAC;CACpB;;;;;;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,uBAA8B;gBACxD,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB;CASvE"}
+{"version":3,"file":"scheduled-ecs-task.d.ts","sourceRoot":"","sources":["../../src/patterns/scheduled-ecs-task.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;;;;;;;OAOG;IACH,QAAQ,EAAE,QAAQ,CAAC;CACpB;;;;;;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,kBAAmB,SAAQ,uBAA8B;gBACxD,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB;CASvE"}

package/lib/patterns/scheduled-ecs-task.js

@@ -14,6 +14,8 @@ const app_aware_construct_1 = require("../utils/mixin/app-aware-construct");
  *
  * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuScheduledLambda`]] instead. This
  * pattern was mainly created to work around the 15 minute lambda timeout.
+ *
+ * If the `subnets` prop is not defined, the task will run in a private subnet by default.
  */
 class GuScheduledEcsTask extends (0, app_aware_construct_1.GuAppAwareConstruct)(ecs_1.GuEcsTask) {
     constructor(scope, id, props) {

package/lib/patterns/scheduled-ecs-task.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduled-ecs-task.js","sourceRoot":"","sources":["../../src/patterns/scheduled-ecs-task.ts"],"names":[],"mappings":";;;AACA,uDAA8C;AAC9C,uEAAiE;AAGjE,2CAA8C;AAC9C,4EAAyE;AAczE;;;;;;;;;GASG;AACH,MAAa,kBAAmB,SAAQ,IAAA,yCAAmB,EAAC,eAAS,CAAC;IACpE,YAAY,KAAc,EAAE,EAAU,EAAE,KAA8B;QACpE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,IAAI,iBAAI,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,CAAC,IAAI,oCAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;CACF;AAVD,gDAUC","sourcesContent":["import type { Schedule } from \"aws-cdk-lib/aws-events\";\nimport { Rule } from \"aws-cdk-lib/aws-events\";\nimport { SfnStateMachine } from \"aws-cdk-lib/aws-events-targets\";\nimport type { GuStack } from \"../constructs/core\";\nimport type { GuEcsTaskProps } from \"../constructs/ecs\";\nimport { GuEcsTask } from \"../constructs/ecs\";\nimport { GuAppAwareConstruct } from \"../utils/mixin/app-aware-construct\";\n\nexport interface GuScheduledEcsTaskProps extends GuEcsTaskProps {\n  /**\n   * Schedule for the task.\n   *\n   * E.g.:\n   *\n   * - `Schedule.expression(\"cron(0 8 ? * MON-FRI *)\")`\n   * - `Schedule.rate(Duration.minutes(5))`\n   */\n  schedule: Schedule;\n}\n\n/**\n * Pattern which creates all of the resources needed to invoke a fargate task on a schedule.\n *\n * The task will be wrapped in a step function to allow for easier triggering and alarming on failure.\n *\n * For all configuration options, see [[`GuScheduledEcsTaskProps`]].\n *\n * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuScheduledLambda`]] instead. This\n * pattern was mainly created to work around the 15 minute lambda timeout.\n */\nexport class GuScheduledEcsTask extends GuAppAwareConstruct(GuEcsTask) {\n  constructor(scope: GuStack, id: string, props: GuScheduledEcsTaskProps) {\n    super(scope, id, props);\n\n    new Rule(scope, `${id}-ScheduleRule`, {\n      schedule: props.schedule,\n      targets: [new SfnStateMachine(this.stateMachine)],\n      enabled: true,\n    });\n  }\n}\n"]}
+{"version":3,"file":"scheduled-ecs-task.js","sourceRoot":"","sources":["../../src/patterns/scheduled-ecs-task.ts"],"names":[],"mappings":";;;AACA,uDAA8C;AAC9C,uEAAiE;AAGjE,2CAA8C;AAC9C,4EAAyE;AAczE;;;;;;;;;;;GAWG;AACH,MAAa,kBAAmB,SAAQ,IAAA,yCAAmB,EAAC,eAAS,CAAC;IACpE,YAAY,KAAc,EAAE,EAAU,EAAE,KAA8B;QACpE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,IAAI,iBAAI,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,CAAC,IAAI,oCAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;CACF;AAVD,gDAUC","sourcesContent":["import type { Schedule } from \"aws-cdk-lib/aws-events\";\nimport { Rule } from \"aws-cdk-lib/aws-events\";\nimport { SfnStateMachine } from \"aws-cdk-lib/aws-events-targets\";\nimport type { GuStack } from \"../constructs/core\";\nimport type { GuEcsTaskProps } from \"../constructs/ecs\";\nimport { GuEcsTask } from \"../constructs/ecs\";\nimport { GuAppAwareConstruct } from \"../utils/mixin/app-aware-construct\";\n\nexport interface GuScheduledEcsTaskProps extends GuEcsTaskProps {\n  /**\n   * Schedule for the task.\n   *\n   * E.g.:\n   *\n   * - `Schedule.expression(\"cron(0 8 ? * MON-FRI *)\")`\n   * - `Schedule.rate(Duration.minutes(5))`\n   */\n  schedule: Schedule;\n}\n\n/**\n * Pattern which creates all of the resources needed to invoke a fargate task on a schedule.\n *\n * The task will be wrapped in a step function to allow for easier triggering and alarming on failure.\n *\n * For all configuration options, see [[`GuScheduledEcsTaskProps`]].\n *\n * Note that if your task reliably completes in less than 15 minutes then you should probably use a [[`GuScheduledLambda`]] instead. This\n * pattern was mainly created to work around the 15 minute lambda timeout.\n *\n * If the `subnets` prop is not defined, the task will run in a private subnet by default.\n */\nexport class GuScheduledEcsTask extends GuAppAwareConstruct(GuEcsTask) {\n  constructor(scope: GuStack, id: string, props: GuScheduledEcsTaskProps) {\n    super(scope, id, props);\n\n    new Rule(scope, `${id}-ScheduleRule`, {\n      schedule: props.schedule,\n      targets: [new SfnStateMachine(this.stateMachine)],\n      enabled: true,\n    });\n  }\n}\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@guardian/cdk",
   "description": "Generic Guardian flavoured AWS CDK components",
-  "version": "50.6.1",
+  "version": "50.6.2",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "files": [
@@ -36,7 +36,7 @@
     "@types/lodash.camelcase": "^4.3.7",
     "@types/lodash.kebabcase": "^4.1.7",
     "@types/lodash.upperfirst": "^4.3.7",
-    "@types/node": "20.2.5",
+    "@types/node": "20.3.1",
     "@types/yargs": "^17.0.19",
     "aws-cdk": "2.78.0",
     "cz-conventional-changelog": "^3.3.0",
@@ -45,7 +45,7 @@
     "gh-pages": "^5.0.0",
     "jest": "^29.5.0",
     "prettier": "^2.8.8",
-    "semantic-release": "^21.0.3",
+    "semantic-release": "^21.0.5",
     "serve": "^14.2.0",
     "ts-jest": "^29.1.0",
     "ts-node": "^10.9.1",
@@ -53,11 +53,11 @@
     "typescript": "~4.9.5"
   },
   "dependencies": {
-    "@oclif/core": "2.8.5",
+    "@oclif/core": "2.8.6",
     "aws-cdk-lib": "2.78.0",
-    "aws-sdk": "^2.1392.0",
+    "aws-sdk": "^2.1397.0",
     "chalk": "^4.1.2",
-    "codemaker": "^1.82.0",
+    "codemaker": "^1.84.0",
     "constructs": "10.2.18",
     "git-url-parse": "^13.1.0",
     "js-yaml": "^4.1.0",