aws-cdk-lib 2.117.0__py3-none-any.whl → 2.119.0__py3-none-any.whl

aws_cdk/aws_ecs/__init__.py

@@ -207,6 +207,20 @@ task_definition.add_to_task_role_policy(
     ))
 ```
 
+To manage task protection settings in an ECS cluster, you can use the `grantTaskProtection` method.
+This method grants the `ecs:UpdateTaskProtection` permission to a specified IAM entity.
+
+```python
+# Assume 'cluster' is an instance of ecs.Cluster
+# cluster: ecs.Cluster
+# task_role: iam.Role
+
+
+# Grant ECS Task Protection permissions to the role
+# Now 'taskRole' has the 'ecs:UpdateTaskProtection' permission on all tasks in the cluster
+cluster.grant_task_protection(task_role)
+```
+
 ### Bottlerocket
 
 [Bottlerocket](https://aws.amazon.com/bottlerocket/) is a Linux-based open source operating system that is
@@ -227,6 +241,20 @@ cluster.add_capacity("bottlerocket-asg",
 )
 ```
 
+You can also specify an NVIDIA-compatible AMI such as in this example:
+
+```python
+# cluster: ecs.Cluster
+
+
+cluster.add_capacity("bottlerocket-asg",
+    instance_type=ec2.InstanceType("p3.2xlarge"),
+    machine_image=ecs.BottleRocketImage(
+        variant=ecs.BottlerocketEcsVariant.AWS_ECS_2_NVIDIA
+    )
+)
+```
+
 ### ARM64 (Graviton) Instances
 
 To launch instances with ARM64 hardware, you can use the Amazon ECS-optimized
@@ -465,6 +493,21 @@ task_def = ecs.TaskDefinition(self, "TaskDef",
 task_def.grant_run(role)
 ```
 
+To deploy containerized applications that require the allocation of standard input (stdin) or a terminal (tty), use the `interactive` property.
+
+This parameter corresponds to `OpenStdin` in the [Create a container](https://docs.docker.com/engine/api/v1.35/#tag/Container/operation/ContainerCreate) section of the [Docker Remote API](https://docs.docker.com/engine/api/v1.35/)
+and the `--interactive` option to [docker run](https://docs.docker.com/engine/reference/run/#security-configuration).
+
+```python
+# task_definition: ecs.TaskDefinition
+
+
+task_definition.add_container("Container",
+    image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
+    interactive=True
+)
+```
+
 ### Images
 
 Images supply the software that runs inside the container. Images can be
@@ -2001,29 +2044,13 @@ class AddCapacityOptions(
 
         Example::
 
-            # vpc: ec2.Vpc
-            
-            
-            # Create an ECS cluster
-            cluster = ecs.Cluster(self, "Cluster", vpc=vpc)
-            
-            # Add capacity to it
-            cluster.add_capacity("DefaultAutoScalingGroupCapacity",
-                instance_type=ec2.InstanceType("t2.xlarge"),
-                desired_capacity=3
-            )
-            
-            task_definition = ecs.Ec2TaskDefinition(self, "TaskDef")
+            # cluster: ecs.Cluster
             
-            task_definition.add_container("DefaultContainer",
-                image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
-                memory_limit_mi_b=512
-            )
             
-            # Instantiate an Amazon ECS Service
-            ecs_service = ecs.Ec2Service(self, "Service",
-                cluster=cluster,
-                task_definition=task_definition
+            cluster.add_capacity("graviton-cluster",
+                min_capacity=2,
+                instance_type=ec2.InstanceType("c6g.large"),
+                machine_image=ecs.EcsOptimizedImage.amazon_linux2(ecs.AmiHardwareType.ARM)
             )
         '''
         if isinstance(vpc_subnets, dict):
@@ -5025,7 +5052,7 @@ class BottleRocketImage(
 
         :param architecture: The CPU architecture. Default: - x86_64
         :param cached_in_context: Whether the AMI ID is cached to be stable between deployments. By default, the newest image is used on each deployment. This will cause instances to be replaced whenever a new version is released, and may cause downtime if there aren't enough running instances in the AutoScalingGroup to reschedule the tasks on. If set to true, the AMI ID will be cached in ``cdk.context.json`` and the same value will be used on future runs. Your instances will not be replaced but your AMI version will grow old over time. To refresh the AMI lookup, you will have to evict the value from the cache using the ``cdk context`` command. See https://docs.aws.amazon.com/cdk/latest/guide/context.html for more information. Can not be set to ``true`` in environment-agnostic stacks. Default: false
-        :param variant: The Amazon ECS variant to use. Only ``aws-ecs-1`` is currently available Default: - BottlerocketEcsVariant.AWS_ECS_1
+        :param variant: The Amazon ECS variant to use. Default: - BottlerocketEcsVariant.AWS_ECS_1
         '''
         props = BottleRocketImageProps(
             architecture=architecture,
@@ -5083,21 +5110,20 @@ class BottleRocketImageProps:
 
         :param architecture: The CPU architecture. Default: - x86_64
         :param cached_in_context: Whether the AMI ID is cached to be stable between deployments. By default, the newest image is used on each deployment. This will cause instances to be replaced whenever a new version is released, and may cause downtime if there aren't enough running instances in the AutoScalingGroup to reschedule the tasks on. If set to true, the AMI ID will be cached in ``cdk.context.json`` and the same value will be used on future runs. Your instances will not be replaced but your AMI version will grow old over time. To refresh the AMI lookup, you will have to evict the value from the cache using the ``cdk context`` command. See https://docs.aws.amazon.com/cdk/latest/guide/context.html for more information. Can not be set to ``true`` in environment-agnostic stacks. Default: false
-        :param variant: The Amazon ECS variant to use. Only ``aws-ecs-1`` is currently available Default: - BottlerocketEcsVariant.AWS_ECS_1
+        :param variant: The Amazon ECS variant to use. Default: - BottlerocketEcsVariant.AWS_ECS_1
 
-        :exampleMetadata: fixture=_generated
+        :exampleMetadata: infused
 
         Example::
 
-            # The code below shows an example of how to instantiate this type.
-            # The values are placeholders you should change.
-            from aws_cdk import aws_ec2 as ec2
-            from aws_cdk import aws_ecs as ecs
+            # cluster: ecs.Cluster
+            
             
-            bottle_rocket_image_props = ecs.BottleRocketImageProps(
-                architecture=ec2.InstanceArchitecture.ARM_64,
-                cached_in_context=False,
-                variant=ecs.BottlerocketEcsVariant.AWS_ECS_1
+            cluster.add_capacity("bottlerocket-asg",
+                instance_type=ec2.InstanceType("p3.2xlarge"),
+                machine_image=ecs.BottleRocketImage(
+                    variant=ecs.BottlerocketEcsVariant.AWS_ECS_2_NVIDIA
+                )
             )
         '''
         if __debug__:
@@ -5149,8 +5175,6 @@ class BottleRocketImageProps:
     def variant(self) -> typing.Optional["BottlerocketEcsVariant"]:
         '''The Amazon ECS variant to use.
 
-        Only ``aws-ecs-1`` is currently available
-
         :default: - BottlerocketEcsVariant.AWS_ECS_1
         '''
         result = self._values.get("variant")
@@ -5170,10 +5194,31 @@ class BottleRocketImageProps:
 
 @jsii.enum(jsii_type="aws-cdk-lib.aws_ecs.BottlerocketEcsVariant")
 class BottlerocketEcsVariant(enum.Enum):
-    '''Amazon ECS variant.'''
+    '''Amazon ECS variant.
+
+    :exampleMetadata: infused
+
+    Example::
+
+        # cluster: ecs.Cluster
+        
+        
+        cluster.add_capacity("bottlerocket-asg",
+            instance_type=ec2.InstanceType("p3.2xlarge"),
+            machine_image=ecs.BottleRocketImage(
+                variant=ecs.BottlerocketEcsVariant.AWS_ECS_2_NVIDIA
+            )
+        )
+    '''
 
     AWS_ECS_1 = "AWS_ECS_1"
     '''aws-ecs-1 variant.'''
+    AWS_ECS_1_NVIDIA = "AWS_ECS_1_NVIDIA"
+    '''aws-ecs-1-nvidia variant.'''
+    AWS_ECS_2 = "AWS_ECS_2"
+    '''aws-ecs-2 variant.'''
+    AWS_ECS_2_NVIDIA = "AWS_ECS_2_NVIDIA"
+    '''aws-ecs-2-nvidia variant.'''
 
 
 class BuiltInAttributes(
@@ -18031,6 +18076,7 @@ class ContainerDefinition(
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -18070,6 +18116,7 @@ class ContainerDefinition(
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -18110,6 +18157,7 @@ class ContainerDefinition(
             health_check=health_check,
             hostname=hostname,
             inference_accelerator_resources=inference_accelerator_resources,
+            interactive=interactive,
             linux_parameters=linux_parameters,
             logging=logging,
             memory_limit_mib=memory_limit_mib,
@@ -18483,6 +18531,7 @@ class ContainerDefinition(
         "health_check": "healthCheck",
         "hostname": "hostname",
         "inference_accelerator_resources": "inferenceAcceleratorResources",
+        "interactive": "interactive",
         "linux_parameters": "linuxParameters",
         "logging": "logging",
         "memory_limit_mib": "memoryLimitMiB",
@@ -18522,6 +18571,7 @@ class ContainerDefinitionOptions:
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -18557,6 +18607,7 @@ class ContainerDefinitionOptions:
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -18627,6 +18678,7 @@ class ContainerDefinitionOptions:
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
             check_type(argname="argument hostname", value=hostname, expected_type=type_hints["hostname"])
             check_type(argname="argument inference_accelerator_resources", value=inference_accelerator_resources, expected_type=type_hints["inference_accelerator_resources"])
+            check_type(argname="argument interactive", value=interactive, expected_type=type_hints["interactive"])
             check_type(argname="argument linux_parameters", value=linux_parameters, expected_type=type_hints["linux_parameters"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument memory_limit_mib", value=memory_limit_mib, expected_type=type_hints["memory_limit_mib"])
@@ -18679,6 +18731,8 @@ class ContainerDefinitionOptions:
             self._values["hostname"] = hostname
         if inference_accelerator_resources is not None:
             self._values["inference_accelerator_resources"] = inference_accelerator_resources
+        if interactive is not None:
+            self._values["interactive"] = interactive
         if linux_parameters is not None:
             self._values["linux_parameters"] = linux_parameters
         if logging is not None:
@@ -18899,6 +18953,17 @@ class ContainerDefinitionOptions:
         result = self._values.get("inference_accelerator_resources")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def interactive(self) -> typing.Optional[builtins.bool]:
+        '''When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+
+        :default: - false
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive
+        '''
+        result = self._values.get("interactive")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def linux_parameters(self) -> typing.Optional["LinuxParameters"]:
         '''Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
@@ -19093,6 +19158,7 @@ class ContainerDefinitionOptions:
         "health_check": "healthCheck",
         "hostname": "hostname",
         "inference_accelerator_resources": "inferenceAcceleratorResources",
+        "interactive": "interactive",
         "linux_parameters": "linuxParameters",
         "logging": "logging",
         "memory_limit_mib": "memoryLimitMiB",
@@ -19133,6 +19199,7 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -19170,6 +19237,7 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -19240,6 +19308,7 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
                 ),
                 hostname="hostname",
                 inference_accelerator_resources=["inferenceAcceleratorResources"],
+                interactive=False,
                 linux_parameters=linux_parameters,
                 logging=log_driver,
                 memory_limit_mi_b=123,
@@ -19297,6 +19366,7 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
             check_type(argname="argument hostname", value=hostname, expected_type=type_hints["hostname"])
             check_type(argname="argument inference_accelerator_resources", value=inference_accelerator_resources, expected_type=type_hints["inference_accelerator_resources"])
+            check_type(argname="argument interactive", value=interactive, expected_type=type_hints["interactive"])
             check_type(argname="argument linux_parameters", value=linux_parameters, expected_type=type_hints["linux_parameters"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument memory_limit_mib", value=memory_limit_mib, expected_type=type_hints["memory_limit_mib"])
@@ -19351,6 +19421,8 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
             self._values["hostname"] = hostname
         if inference_accelerator_resources is not None:
             self._values["inference_accelerator_resources"] = inference_accelerator_resources
+        if interactive is not None:
+            self._values["interactive"] = interactive
         if linux_parameters is not None:
             self._values["linux_parameters"] = linux_parameters
         if logging is not None:
@@ -19571,6 +19643,17 @@ class ContainerDefinitionProps(ContainerDefinitionOptions):
         result = self._values.get("inference_accelerator_resources")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def interactive(self) -> typing.Optional[builtins.bool]:
+        '''When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+
+        :default: - false
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive
+        '''
+        result = self._values.get("interactive")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def linux_parameters(self) -> typing.Optional["LinuxParameters"]:
         '''Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
@@ -24643,6 +24726,7 @@ class FirelensLogRouter(
             ),
             hostname="hostname",
             inference_accelerator_resources=["inferenceAcceleratorResources"],
+            interactive=False,
             linux_parameters=linux_parameters,
             logging=log_driver,
             memory_limit_mi_b=123,
@@ -24704,6 +24788,7 @@ class FirelensLogRouter(
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -24744,6 +24829,7 @@ class FirelensLogRouter(
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -24785,6 +24871,7 @@ class FirelensLogRouter(
             health_check=health_check,
             hostname=hostname,
             inference_accelerator_resources=inference_accelerator_resources,
+            interactive=interactive,
             linux_parameters=linux_parameters,
             logging=logging,
             memory_limit_mib=memory_limit_mib,
@@ -24847,6 +24934,7 @@ class FirelensLogRouter(
         "health_check": "healthCheck",
         "hostname": "hostname",
         "inference_accelerator_resources": "inferenceAcceleratorResources",
+        "interactive": "interactive",
         "linux_parameters": "linuxParameters",
         "logging": "logging",
         "memory_limit_mib": "memoryLimitMiB",
@@ -24887,6 +24975,7 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -24924,6 +25013,7 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -25002,6 +25092,7 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
                 ),
                 hostname="hostname",
                 inference_accelerator_resources=["inferenceAcceleratorResources"],
+                interactive=False,
                 linux_parameters=linux_parameters,
                 logging=log_driver,
                 memory_limit_mi_b=123,
@@ -25061,6 +25152,7 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
             check_type(argname="argument hostname", value=hostname, expected_type=type_hints["hostname"])
             check_type(argname="argument inference_accelerator_resources", value=inference_accelerator_resources, expected_type=type_hints["inference_accelerator_resources"])
+            check_type(argname="argument interactive", value=interactive, expected_type=type_hints["interactive"])
             check_type(argname="argument linux_parameters", value=linux_parameters, expected_type=type_hints["linux_parameters"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument memory_limit_mib", value=memory_limit_mib, expected_type=type_hints["memory_limit_mib"])
@@ -25115,6 +25207,8 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
             self._values["hostname"] = hostname
         if inference_accelerator_resources is not None:
             self._values["inference_accelerator_resources"] = inference_accelerator_resources
+        if interactive is not None:
+            self._values["interactive"] = interactive
         if linux_parameters is not None:
             self._values["linux_parameters"] = linux_parameters
         if logging is not None:
@@ -25335,6 +25429,17 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
         result = self._values.get("inference_accelerator_resources")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def interactive(self) -> typing.Optional[builtins.bool]:
+        '''When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+
+        :default: - false
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive
+        '''
+        result = self._values.get("interactive")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def linux_parameters(self) -> typing.Optional["LinuxParameters"]:
         '''Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
@@ -25536,6 +25641,7 @@ class FirelensLogRouterDefinitionOptions(ContainerDefinitionOptions):
         "health_check": "healthCheck",
         "hostname": "hostname",
         "inference_accelerator_resources": "inferenceAcceleratorResources",
+        "interactive": "interactive",
         "linux_parameters": "linuxParameters",
         "logging": "logging",
         "memory_limit_mib": "memoryLimitMiB",
@@ -25577,6 +25683,7 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
         health_check: typing.Optional[typing.Union["HealthCheck", typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional["LinuxParameters"] = None,
         logging: typing.Optional["LogDriver"] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -25615,6 +25722,7 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -25696,6 +25804,7 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
                 ),
                 hostname="hostname",
                 inference_accelerator_resources=["inferenceAcceleratorResources"],
+                interactive=False,
                 linux_parameters=linux_parameters,
                 logging=log_driver,
                 memory_limit_mi_b=123,
@@ -25755,6 +25864,7 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
             check_type(argname="argument health_check", value=health_check, expected_type=type_hints["health_check"])
             check_type(argname="argument hostname", value=hostname, expected_type=type_hints["hostname"])
             check_type(argname="argument inference_accelerator_resources", value=inference_accelerator_resources, expected_type=type_hints["inference_accelerator_resources"])
+            check_type(argname="argument interactive", value=interactive, expected_type=type_hints["interactive"])
             check_type(argname="argument linux_parameters", value=linux_parameters, expected_type=type_hints["linux_parameters"])
             check_type(argname="argument logging", value=logging, expected_type=type_hints["logging"])
             check_type(argname="argument memory_limit_mib", value=memory_limit_mib, expected_type=type_hints["memory_limit_mib"])
@@ -25811,6 +25921,8 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
             self._values["hostname"] = hostname
         if inference_accelerator_resources is not None:
             self._values["inference_accelerator_resources"] = inference_accelerator_resources
+        if interactive is not None:
+            self._values["interactive"] = interactive
         if linux_parameters is not None:
             self._values["linux_parameters"] = linux_parameters
         if logging is not None:
@@ -26031,6 +26143,17 @@ class FirelensLogRouterProps(ContainerDefinitionProps):
         result = self._values.get("inference_accelerator_resources")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def interactive(self) -> typing.Optional[builtins.bool]:
+        '''When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated.
+
+        :default: - false
+
+        :see: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-containerdefinition.html#cfn-ecs-taskdefinition-containerdefinition-interactive
+        '''
+        result = self._values.get("interactive")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def linux_parameters(self) -> typing.Optional["LinuxParameters"]:
         '''Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
@@ -32646,6 +32769,7 @@ class TaskDefinition(
         health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional[LinuxParameters] = None,
         logging: typing.Optional[LogDriver] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -32683,6 +32807,7 @@ class TaskDefinition(
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -32721,6 +32846,7 @@ class TaskDefinition(
             health_check=health_check,
             hostname=hostname,
             inference_accelerator_resources=inference_accelerator_resources,
+            interactive=interactive,
             linux_parameters=linux_parameters,
             logging=logging,
             memory_limit_mib=memory_limit_mib,
@@ -32778,6 +32904,7 @@ class TaskDefinition(
         health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
         hostname: typing.Optional[builtins.str] = None,
         inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+        interactive: typing.Optional[builtins.bool] = None,
         linux_parameters: typing.Optional[LinuxParameters] = None,
         logging: typing.Optional[LogDriver] = None,
         memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -32816,6 +32943,7 @@ class TaskDefinition(
         :param health_check: The health check command and associated configuration parameters for the container. Default: - Health check configuration from container.
         :param hostname: The hostname to use for your container. Default: - Automatic hostname.
         :param inference_accelerator_resources: The inference accelerators referenced by the container. Default: - No inference accelerators assigned.
+        :param interactive: When this parameter is true, you can deploy containerized applications that require stdin or a tty to be allocated. Default: - false
         :param linux_parameters: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see `KernelCapabilities <https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html>`_. Default: - No Linux parameters.
         :param logging: The log configuration specification for the container. Default: - Containers use the same logging driver that the Docker daemon uses.
         :param memory_limit_mib: The amount (in MiB) of memory to present to the container. If your container attempts to exceed the allocated memory, the container is terminated. At least one of memoryLimitMiB and memoryReservationMiB is required for non-Fargate services. Default: - No memory limit.
@@ -32855,6 +32983,7 @@ class TaskDefinition(
             health_check=health_check,
             hostname=hostname,
             inference_accelerator_resources=inference_accelerator_resources,
+            interactive=interactive,
             linux_parameters=linux_parameters,
             logging=logging,
             memory_limit_mib=memory_limit_mib,
@@ -35072,6 +35201,20 @@ class Cluster(
         '''Enable the Fargate capacity providers for this cluster.'''
         return typing.cast(None, jsii.invoke(self, "enableFargateCapacityProviders", []))
 
+    @jsii.member(jsii_name="grantTaskProtection")
+    def grant_task_protection(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+        '''Grants an ECS Task Protection API permission to the specified grantee.
+
+        This method provides a streamlined way to assign the 'ecs:UpdateTaskProtection'
+        permission, enabling the grantee to manage task protection in the ECS cluster.
+
+        :param grantee: The entity (e.g., IAM role or user) to grant the permissions to.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4f92e7b69ee41cf136ff4f9b1ffcc190b3802e99c87300b6f89dbbef324d60f5)
+            check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantTaskProtection", [grantee]))
+
     @jsii.member(jsii_name="metric")
     def metric(
         self,
@@ -39576,6 +39719,7 @@ def _typecheckingstub__d8756b492e023ad8d33a399196b15b610f709400ce213e179f17dd1f6
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -39697,6 +39841,7 @@ def _typecheckingstub__f2e5f24c1574825a81dd77783d48886a430a675a0e04f03559eca98b5
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -39736,6 +39881,7 @@ def _typecheckingstub__20c974a49c79829fac0811dffaf78c449f92ae136414b96232160d37c
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -40242,6 +40388,7 @@ def _typecheckingstub__aa1e4969dd0e00a5737510c273aa9546ad4ce7bc5a8a146f2a37666b0
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -40287,6 +40434,7 @@ def _typecheckingstub__2bb9382e9a7b1b34a020902905c4bf83e2d4970135e7592e5b5a1da62
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -40327,6 +40475,7 @@ def _typecheckingstub__498b2375cb2035a958edbdd10ad5f4352caa5773be14b63a07c337871
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -41018,6 +41167,7 @@ def _typecheckingstub__8fe416001b357a118b80b0f9e3432c5bffbeffe29c2f7e67a02e5589c
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -41065,6 +41215,7 @@ def _typecheckingstub__a448c235107c9543bb055362134e3500d0a20b6f51e433675f952a773
     health_check: typing.Optional[typing.Union[HealthCheck, typing.Dict[builtins.str, typing.Any]]] = None,
     hostname: typing.Optional[builtins.str] = None,
     inference_accelerator_resources: typing.Optional[typing.Sequence[builtins.str]] = None,
+    interactive: typing.Optional[builtins.bool] = None,
     linux_parameters: typing.Optional[LinuxParameters] = None,
     logging: typing.Optional[LogDriver] = None,
     memory_limit_mib: typing.Optional[jsii.Number] = None,
@@ -41389,6 +41540,12 @@ def _typecheckingstub__dc82c424ab5a0b25f0e355e707c39f45826ed166c15976f45690abfa1
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__4f92e7b69ee41cf136ff4f9b1ffcc190b3802e99c87300b6f89dbbef324d60f5(
+    grantee: _IGrantable_71c4f5de,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__35d18b54e19d86c5562f997d757fcd71f57fa6d194d5ed055020a0ad29b81b04(
     metric_name: builtins.str,
     *,