aws-cdk-lib 2.174.1__py3-none-any.whl → 2.175.0__py3-none-any.whl

aws_cdk/aws_ecs/__init__.py

@@ -35,7 +35,8 @@ task_definition.add_container("DefaultContainer",
 # Instantiate an Amazon ECS Service
 ecs_service = ecs.Ec2Service(self, "Service",
     cluster=cluster,
-    task_definition=task_definition
+    task_definition=task_definition,
+    min_healthy_percent=100
 )
 ```
 
@@ -661,6 +662,23 @@ task_definition.add_container("container",
 )
 ```
 
+### Enable Fault Injection
+
+You can utilize fault injection with Amazon ECS on both Amazon EC2 and Fargate to test how their application responds to certain impairment scenarios. These tests provide information you can use to optimize your application's performance and resiliency.
+
+When fault injection is enabled, the Amazon ECS container agent allows tasks access to new fault injection endpoints.
+Fault injection only works with tasks using the `AWS_VPC` or `HOST` network modes.
+
+For more infomation, see [Use fault injection with your Amazon ECS and Fargate workloads](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/fault-injection.html).
+
+To enable Fault Injection for the task definiton, set `enableFaultInjection` to true.
+
+```python
+ecs.Ec2TaskDefinition(self, "Ec2TaskDefinition",
+    enable_fault_injection=True
+)
+```
+
 ## Docker labels
 
 You can add labels to the container with the `dockerLabels` property or with the `addDockerLabel` method:
@@ -779,7 +797,8 @@ Amazon ECS automatically restarts the task.
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
-    desired_count=5
+    desired_count=5,
+    min_healthy_percent=100
 )
 ```
 
@@ -793,7 +812,8 @@ ECS Anywhere service definition looks like:
 service = ecs.ExternalService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
-    desired_count=5
+    desired_count=5,
+    min_healthy_percent=100
 )
 ```
 
@@ -815,6 +835,7 @@ ecs.ExternalService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
     desired_count=5,
+    min_healthy_percent=100,
     task_definition_revision=ecs.TaskDefinitionRevision.of(1)
 )
 
@@ -822,6 +843,7 @@ ecs.ExternalService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
     desired_count=5,
+    min_healthy_percent=100,
     task_definition_revision=ecs.TaskDefinitionRevision.LATEST
 )
 ```
@@ -844,6 +866,7 @@ See [Using the deployment circuit breaker](https://docs.aws.amazon.com/AmazonECS
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     circuit_breaker=ecs.DeploymentCircuitBreaker(
         enable=True,
         rollback=True
@@ -881,6 +904,7 @@ import aws_cdk.aws_cloudwatch as cw
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     deployment_alarms=ecs.DeploymentAlarmConfig(
         alarm_names=[elb_alarm.alarm_name],
         behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -969,7 +993,8 @@ service_name = "MyFargateService"
 service = ecs.FargateService(self, "Service",
     service_name=service_name,
     cluster=cluster,
-    task_definition=task_definition
+    task_definition=task_definition,
+    min_healthy_percent=100
 )
 
 cpu_metric = cw.Metric(
@@ -1008,7 +1033,7 @@ on the service, there will be no restrictions on the alarm name.
 # cluster: ecs.Cluster
 # task_definition: ecs.TaskDefinition
 
-service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition)
+service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
 
 lb = elbv2.ApplicationLoadBalancer(self, "LB", vpc=vpc, internet_facing=True)
 listener = lb.add_listener("Listener", port=80)
@@ -1036,7 +1061,7 @@ Alternatively, you can also create all load balancer targets to be registered in
 # task_definition: ecs.TaskDefinition
 # vpc: ec2.Vpc
 
-service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition)
+service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
 
 lb = elbv2.ApplicationLoadBalancer(self, "LB", vpc=vpc, internet_facing=True)
 listener = lb.add_listener("Listener", port=80)
@@ -1074,7 +1099,7 @@ for the alternatives.
 # task_definition: ecs.TaskDefinition
 # vpc: ec2.Vpc
 
-service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition)
+service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
 
 lb = elb.LoadBalancer(self, "LB", vpc=vpc)
 lb.add_listener(external_port=80)
@@ -1088,7 +1113,7 @@ Similarly, if you want to have more control over load balancer targeting:
 # task_definition: ecs.TaskDefinition
 # vpc: ec2.Vpc
 
-service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition)
+service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
 
 lb = elb.LoadBalancer(self, "LB", vpc=vpc)
 lb.add_listener(external_port=80)
@@ -1427,6 +1452,7 @@ specific_container.add_port_mappings(
 ecs.Ec2Service(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     cloud_map_options=ecs.CloudMapOptions(
         # Create SRV records - useful for bridge networking
         dns_record_type=cloudmap.DnsRecordType.SRV,
@@ -1486,6 +1512,7 @@ task_definition.add_container("web",
 ecs.FargateService(self, "FargateService",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     capacity_provider_strategies=[ecs.CapacityProviderStrategy(
         capacity_provider="FARGATE_SPOT",
         weight=2
@@ -1562,6 +1589,7 @@ task_definition.add_container("web",
 ecs.Ec2Service(self, "EC2Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     capacity_provider_strategies=[ecs.CapacityProviderStrategy(
         capacity_provider=capacity_provider.capacity_provider_name,
         weight=1
@@ -1658,6 +1686,7 @@ your `Ec2Service`, `FargateService` or `ExternalService`.
 service = ecs.Ec2Service(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     enable_execute_command=True
 )
 ```
@@ -1733,6 +1762,7 @@ cluster.add_default_cloud_map_namespace(
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     service_connect_configuration=ecs.ServiceConnectProps(
         services=[ecs.ServiceConnectService(
             port_mapping_name="api",
@@ -1756,7 +1786,8 @@ To opt a service into using service connect without advertising a port, simply c
 
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
-    task_definition=task_definition
+    task_definition=task_definition,
+    min_healthy_percent=100
 )
 service.enable_service_connect()
 ```
@@ -1771,6 +1802,7 @@ Service Connect also allows custom logging, Service Discovery name, and configur
 custom_service = ecs.FargateService(self, "CustomizedService",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     service_connect_configuration=ecs.ServiceConnectProps(
         log_driver=ecs.LogDrivers.aws_logs(
             stream_prefix="sc-traffic"
@@ -1800,6 +1832,7 @@ the `idleTimeout` is reached and not the `perRequestTimeout`.
 service = ecs.FargateService(self, "Service",
     cluster=cluster,
     task_definition=task_definition,
+    min_healthy_percent=100,
     service_connect_configuration=ecs.ServiceConnectProps(
         services=[ecs.ServiceConnectService(
             port_mapping_name="api",
@@ -1862,7 +1895,8 @@ task_definition.add_volume(volume)
 
 service = ecs.FargateService(self, "FargateService",
     cluster=cluster,
-    task_definition=task_definition
+    task_definition=task_definition,
+    min_healthy_percent=100
 )
 
 service.add_volume(volume)
@@ -1892,7 +1926,8 @@ volume_from_snapshot.mount_in(container,
 task_definition.add_volume(volume_from_snapshot)
 service = ecs.FargateService(self, "FargateService",
     cluster=cluster,
-    task_definition=task_definition
+    task_definition=task_definition,
+    min_healthy_percent=100
 )
 
 service.add_volume(volume_from_snapshot)
@@ -2102,7 +2137,7 @@ class AddAutoScalingGroupCapacityOptions:
     ) -> None:
         '''The properties for adding an AutoScalingGroup.
 
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -2143,9 +2178,14 @@ class AddAutoScalingGroupCapacityOptions:
 
     @builtins.property
     def can_containers_access_instance_role(self) -> typing.Optional[builtins.bool]:
-        '''Specifies whether the containers can access the container instance role.
+        '''(deprecated) Specifies whether the containers can access the container instance role.
 
-        :default: false
+        :default: true if
+
+        :deprecated: See https://github.com/aws/aws-cdk/discussions/32609
+
+        :stability: deprecated
+        :aws-cdk: /aws-ecs:disableEcsImdsBlocking is set to false.
         '''
         result = self._values.get("can_containers_access_instance_role")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -2283,7 +2323,7 @@ class AddCapacityOptions(
     ) -> None:
         '''The properties for adding instance capacity to an AutoScalingGroup.
 
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -2437,9 +2477,14 @@ class AddCapacityOptions(
 
     @builtins.property
     def can_containers_access_instance_role(self) -> typing.Optional[builtins.bool]:
-        '''Specifies whether the containers can access the container instance role.
+        '''(deprecated) Specifies whether the containers can access the container instance role.
 
-        :default: false
+        :default: true if
+
+        :deprecated: See https://github.com/aws/aws-cdk/discussions/32609
+
+        :stability: deprecated
+        :aws-cdk: /aws-ecs:disableEcsImdsBlocking is set to false.
         '''
         result = self._values.get("can_containers_access_instance_role")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -2925,6 +2970,7 @@ class AlarmBehavior(enum.Enum):
         service = ecs.FargateService(self, "Service",
             cluster=cluster,
             task_definition=task_definition,
+            min_healthy_percent=100,
             deployment_alarms=ecs.DeploymentAlarmConfig(
                 alarm_names=[elb_alarm.alarm_name],
                 behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -3362,7 +3408,7 @@ class AsgCapacityProvider(
         :param maximum_scaling_step_size: Maximum scaling step size. In most cases this should be left alone. Default: 1000
         :param minimum_scaling_step_size: Minimum scaling step size. In most cases this should be left alone. Default: 1
         :param target_capacity_percent: Target capacity percent. In most cases this should be left alone. Default: 100
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -3413,9 +3459,14 @@ class AsgCapacityProvider(
     @builtins.property
     @jsii.member(jsii_name="canContainersAccessInstanceRole")
     def can_containers_access_instance_role(self) -> typing.Optional[builtins.bool]:
-        '''Specifies whether the containers can access the container instance role.
+        '''(deprecated) Specifies whether the containers can access the container instance role.
 
-        :default: false
+        :default: true if
+
+        :deprecated: See https://github.com/aws/aws-cdk/discussions/32609
+
+        :stability: deprecated
+        :aws-cdk: /aws-ecs:disableEcsImdsBlocking is set to false.
         '''
         return typing.cast(typing.Optional[builtins.bool], jsii.get(self, "canContainersAccessInstanceRole"))
 
@@ -3471,7 +3522,7 @@ class AsgCapacityProviderProps(AddAutoScalingGroupCapacityOptions):
     ) -> None:
         '''The options for creating an Auto Scaling Group Capacity Provider.
 
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -3561,9 +3612,14 @@ class AsgCapacityProviderProps(AddAutoScalingGroupCapacityOptions):
 
     @builtins.property
     def can_containers_access_instance_role(self) -> typing.Optional[builtins.bool]:
-        '''Specifies whether the containers can access the container instance role.
+        '''(deprecated) Specifies whether the containers can access the container instance role.
 
-        :default: false
+        :default: true if
+
+        :deprecated: See https://github.com/aws/aws-cdk/discussions/32609
+
+        :stability: deprecated
+        :aws-cdk: /aws-ecs:disableEcsImdsBlocking is set to false.
         '''
         result = self._values.get("can_containers_access_instance_role")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -19188,6 +19244,7 @@ class CloudMapNamespaceOptions:
             service = ecs.FargateService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 service_connect_configuration=ecs.ServiceConnectProps(
                     services=[ecs.ServiceConnectService(
                         port_mapping_name="api",
@@ -19652,28 +19709,24 @@ class ClusterProps:
 
         Example::
 
-            vpc = ec2.Vpc.from_lookup(self, "Vpc",
-                is_default=True
-            )
-            cluster = ecs.Cluster(self, "ECSCluster", vpc=vpc)
+            from aws_cdk import Tags
             
-            task_definition = ecs.TaskDefinition(self, "TD",
-                compatibility=ecs.Compatibility.FARGATE,
-                cpu="256",
-                memory_mi_b="512"
-            )
             
-            task_definition.add_container("TheContainer",
-                image=ecs.ContainerImage.from_registry("foo/bar")
+            vpc = ec2.Vpc(self, "Vpc", max_azs=1)
+            cluster = ecs.Cluster(self, "EcsCluster", vpc=vpc)
+            task_definition = ecs.FargateTaskDefinition(self, "TaskDef",
+                memory_limit_mi_b=512,
+                cpu=256
             )
-            
-            run_task = tasks.EcsRunTask(self, "Run",
-                integration_pattern=sfn.IntegrationPattern.RUN_JOB,
+            task_definition.add_container("WebContainer",
+                image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample")
+            )
+            Tags.of(task_definition).add("my-tag", "my-tag-value")
+            scheduled_fargate_task = ecs_patterns.ScheduledFargateTask(self, "ScheduledFargateTask",
                 cluster=cluster,
                 task_definition=task_definition,
-                launch_target=tasks.EcsFargateLaunchTarget(),
-                cpu="1024",
-                memory_mi_b="1048"
+                schedule=appscaling.Schedule.expression("rate(1 minute)"),
+                propagate_tags=ecs.PropagatedTagSource.TASK_DEFINITION
             )
         '''
         if isinstance(capacity, dict):
@@ -19917,6 +19970,7 @@ class CommonTaskDefinitionAttributes:
     jsii_type="aws-cdk-lib.aws_ecs.CommonTaskDefinitionProps",
     jsii_struct_bases=[],
     name_mapping={
+        "enable_fault_injection": "enableFaultInjection",
         "execution_role": "executionRole",
         "family": "family",
         "proxy_configuration": "proxyConfiguration",
@@ -19928,6 +19982,7 @@ class CommonTaskDefinitionProps:
     def __init__(
         self,
         *,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional["ProxyConfiguration"] = None,
@@ -19939,6 +19994,7 @@ class CommonTaskDefinitionProps:
         For more information, see
         `Task Definition Parameters <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html>`_.
 
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -19958,6 +20014,7 @@ class CommonTaskDefinitionProps:
             # role: iam.Role
             
             common_task_definition_props = ecs.CommonTaskDefinitionProps(
+                enable_fault_injection=False,
                 execution_role=role,
                 family="family",
                 proxy_configuration=proxy_configuration,
@@ -20000,12 +20057,15 @@ class CommonTaskDefinitionProps:
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__c1277747b28f7882811be2d0e701d4bf9aa7e64beeaa64689d3e2d7c2d8099c4)
+            check_type(argname="argument enable_fault_injection", value=enable_fault_injection, expected_type=type_hints["enable_fault_injection"])
             check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
             check_type(argname="argument family", value=family, expected_type=type_hints["family"])
             check_type(argname="argument proxy_configuration", value=proxy_configuration, expected_type=type_hints["proxy_configuration"])
             check_type(argname="argument task_role", value=task_role, expected_type=type_hints["task_role"])
             check_type(argname="argument volumes", value=volumes, expected_type=type_hints["volumes"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if enable_fault_injection is not None:
+            self._values["enable_fault_injection"] = enable_fault_injection
         if execution_role is not None:
             self._values["execution_role"] = execution_role
         if family is not None:
@@ -20017,6 +20077,17 @@ class CommonTaskDefinitionProps:
         if volumes is not None:
             self._values["volumes"] = volumes
 
+    @builtins.property
+    def enable_fault_injection(self) -> typing.Optional[builtins.bool]:
+        '''Enables fault injection and allows for fault injection requests to be accepted from the task's containers.
+
+        Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes.
+
+        :default: undefined - ECS default setting is false
+        '''
+        result = self._values.get("enable_fault_injection")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def execution_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf.
@@ -20160,6 +20231,7 @@ class ContainerDefinition(
         ecs.Ec2Service(self, "Service",
             cluster=cluster,
             task_definition=task_definition,
+            min_healthy_percent=100,
             cloud_map_options=ecs.CloudMapOptions(
                 # Create SRV records - useful for bridge networking
                 dns_record_type=cloudmap.DnsRecordType.SRV,
@@ -20789,33 +20861,26 @@ class ContainerDefinitionOptions:
 
         Example::
 
-            # task_definition: ecs.TaskDefinition
             # cluster: ecs.Cluster
+            # vpc: ec2.Vpc
             
-            
-            # Add a container to the task definition
-            specific_container = task_definition.add_container("Container",
-                image=ecs.ContainerImage.from_registry("/aws/aws-example-app"),
-                memory_limit_mi_b=2048
-            )
-            
-            # Add a port mapping
-            specific_container.add_port_mappings(
-                container_port=7600,
-                protocol=ecs.Protocol.TCP
-            )
-            
-            ecs.Ec2Service(self, "Service",
+            service = ecs_patterns.ApplicationLoadBalancedFargateService(self, "Service",
                 cluster=cluster,
-                task_definition=task_definition,
-                cloud_map_options=ecs.CloudMapOptions(
-                    # Create SRV records - useful for bridge networking
-                    dns_record_type=cloudmap.DnsRecordType.SRV,
-                    # Targets port TCP port 7600 `specificContainer`
-                    container=specific_container,
-                    container_port=7600
+                vpc=vpc,
+                desired_count=1,
+                min_healthy_percent=100,
+                task_image_options=ecsPatterns.ApplicationLoadBalancedTaskImageOptions(
+                    image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
+                    docker_labels={
+                        "application.label.one": "first_label",
+                        "application.label.two": "second_label"
+                    }
                 )
             )
+            
+            service.task_definition.add_container("Sidecar",
+                image=ecs.ContainerImage.from_registry("example/metrics-sidecar")
+            )
         '''
         if isinstance(health_check, dict):
             health_check = HealthCheck(**health_check)
@@ -22257,18 +22322,32 @@ class ContainerImage(
 
     Example::
 
-        # my_secret: secretsmanager.ISecret
+        # vpc: ec2.Vpc
         
         
-        job_defn = batch.EcsJobDefinition(self, "JobDefn",
-            container=batch.EcsEc2ContainerDefinition(self, "containerDefn",
-                image=ecs.ContainerImage.from_registry("public.ecr.aws/amazonlinux/amazonlinux:latest"),
-                memory=cdk.Size.mebibytes(2048),
-                cpu=256,
-                secrets={
-                    "MY_SECRET_ENV_VAR": batch.Secret.from_secrets_manager(my_secret)
-                }
+        cluster = ecs.Cluster(self, "FargateCPCluster",
+            vpc=vpc,
+            enable_fargate_capacity_providers=True
+        )
+        
+        task_definition = ecs.FargateTaskDefinition(self, "TaskDef")
+        
+        task_definition.add_container("web",
+            image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample")
+        )
+        
+        ecs.FargateService(self, "FargateService",
+            cluster=cluster,
+            task_definition=task_definition,
+            min_healthy_percent=100,
+            capacity_provider_strategies=[ecs.CapacityProviderStrategy(
+                capacity_provider="FARGATE_SPOT",
+                weight=2
+            ), ecs.CapacityProviderStrategy(
+                capacity_provider="FARGATE",
+                weight=1
             )
+            ]
         )
     '''
 
@@ -22586,7 +22665,8 @@ class ContainerMountPoint(BaseMountPoint):
             
             service = ecs.FargateService(self, "FargateService",
                 cluster=cluster,
-                task_definition=task_definition
+                task_definition=task_definition,
+                min_healthy_percent=100
             )
             
             service.add_volume(volume)
@@ -22988,6 +23068,7 @@ class DeploymentAlarmOptions:
             service = ecs.FargateService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 deployment_alarms=ecs.DeploymentAlarmConfig(
                     alarm_names=[elb_alarm.alarm_name],
                     behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -23061,6 +23142,7 @@ class DeploymentCircuitBreaker:
             service = ecs.FargateService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 circuit_breaker=ecs.DeploymentCircuitBreaker(
                     enable=True,
                     rollback=True
@@ -23716,7 +23798,8 @@ class EbsPropagatedTagSource(enum.Enum):
         
         service = ecs.FargateService(self, "FargateService",
             cluster=cluster,
-            task_definition=task_definition
+            task_definition=task_definition,
+            min_healthy_percent=100
         )
         
         service.add_volume(volume)
@@ -23913,7 +23996,7 @@ class Ec2ServiceProps(BaseServiceOptions):
             # task_definition: ecs.TaskDefinition
             # vpc: ec2.Vpc
             
-            service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition)
+            service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
             
             lb = elb.LoadBalancer(self, "LB", vpc=vpc)
             lb.add_listener(external_port=80)
@@ -24396,6 +24479,7 @@ class Ec2TaskDefinitionAttributes(CommonTaskDefinitionAttributes):
     jsii_type="aws-cdk-lib.aws_ecs.Ec2TaskDefinitionProps",
     jsii_struct_bases=[CommonTaskDefinitionProps],
     name_mapping={
+        "enable_fault_injection": "enableFaultInjection",
         "execution_role": "executionRole",
         "family": "family",
         "proxy_configuration": "proxyConfiguration",
@@ -24412,6 +24496,7 @@ class Ec2TaskDefinitionProps(CommonTaskDefinitionProps):
     def __init__(
         self,
         *,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional["ProxyConfiguration"] = None,
@@ -24425,6 +24510,7 @@ class Ec2TaskDefinitionProps(CommonTaskDefinitionProps):
     ) -> None:
         '''The properties for a task definition run on an EC2 cluster.
 
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -24440,18 +24526,18 @@ class Ec2TaskDefinitionProps(CommonTaskDefinitionProps):
 
         Example::
 
-            ec2_task_definition = ecs.Ec2TaskDefinition(self, "TaskDef",
-                network_mode=ecs.NetworkMode.BRIDGE
-            )
+            inference_accelerators = [{
+                "device_name": "device1",
+                "device_type": "eia2.medium"
+            }]
             
-            container = ec2_task_definition.add_container("WebContainer",
-                # Use an image from DockerHub
-                image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample"),
-                memory_limit_mi_b=1024
+            task_definition = ecs.Ec2TaskDefinition(self, "Ec2TaskDef",
+                inference_accelerators=inference_accelerators
             )
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__11bd13308faca16514041c56d48a3f2515c80d4039888b53668ceaca5b37dc0e)
+            check_type(argname="argument enable_fault_injection", value=enable_fault_injection, expected_type=type_hints["enable_fault_injection"])
             check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
             check_type(argname="argument family", value=family, expected_type=type_hints["family"])
             check_type(argname="argument proxy_configuration", value=proxy_configuration, expected_type=type_hints["proxy_configuration"])
@@ -24463,6 +24549,8 @@ class Ec2TaskDefinitionProps(CommonTaskDefinitionProps):
             check_type(argname="argument pid_mode", value=pid_mode, expected_type=type_hints["pid_mode"])
             check_type(argname="argument placement_constraints", value=placement_constraints, expected_type=type_hints["placement_constraints"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if enable_fault_injection is not None:
+            self._values["enable_fault_injection"] = enable_fault_injection
         if execution_role is not None:
             self._values["execution_role"] = execution_role
         if family is not None:
@@ -24484,6 +24572,17 @@ class Ec2TaskDefinitionProps(CommonTaskDefinitionProps):
         if placement_constraints is not None:
             self._values["placement_constraints"] = placement_constraints
 
+    @builtins.property
+    def enable_fault_injection(self) -> typing.Optional[builtins.bool]:
+        '''Enables fault injection and allows for fault injection requests to be accepted from the task's containers.
+
+        Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes.
+
+        :default: undefined - ECS default setting is false
+        '''
+        result = self._values.get("enable_fault_injection")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def execution_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf.
@@ -24909,7 +25008,7 @@ class EcsTarget:
             # task_definition: ecs.TaskDefinition
             # vpc: ec2.Vpc
             
-            service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition)
+            service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
             
             lb = elbv2.ApplicationLoadBalancer(self, "LB", vpc=vpc, internet_facing=True)
             listener = lb.add_listener("Listener", port=80)
@@ -25828,7 +25927,8 @@ class ExternalServiceProps(BaseServiceOptions):
             service = ecs.ExternalService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
-                desired_count=5
+                desired_count=5,
+                min_healthy_percent=100
             )
         '''
         if isinstance(circuit_breaker, dict):
@@ -26223,6 +26323,7 @@ class ExternalTaskDefinitionAttributes(CommonTaskDefinitionAttributes):
     jsii_type="aws-cdk-lib.aws_ecs.ExternalTaskDefinitionProps",
     jsii_struct_bases=[CommonTaskDefinitionProps],
     name_mapping={
+        "enable_fault_injection": "enableFaultInjection",
         "execution_role": "executionRole",
         "family": "family",
         "proxy_configuration": "proxyConfiguration",
@@ -26235,6 +26336,7 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
     def __init__(
         self,
         *,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional["ProxyConfiguration"] = None,
@@ -26244,6 +26346,7 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
     ) -> None:
         '''The properties for a task definition run on an External cluster.
 
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -26264,6 +26367,7 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
             # role: iam.Role
             
             external_task_definition_props = ecs.ExternalTaskDefinitionProps(
+                enable_fault_injection=False,
                 execution_role=role,
                 family="family",
                 network_mode=ecs.NetworkMode.NONE,
@@ -26307,6 +26411,7 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__9b7789082516541a1aab36b1c591e13ce99110db761ab34a0d177950ecd704cb)
+            check_type(argname="argument enable_fault_injection", value=enable_fault_injection, expected_type=type_hints["enable_fault_injection"])
             check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
             check_type(argname="argument family", value=family, expected_type=type_hints["family"])
             check_type(argname="argument proxy_configuration", value=proxy_configuration, expected_type=type_hints["proxy_configuration"])
@@ -26314,6 +26419,8 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
             check_type(argname="argument volumes", value=volumes, expected_type=type_hints["volumes"])
             check_type(argname="argument network_mode", value=network_mode, expected_type=type_hints["network_mode"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if enable_fault_injection is not None:
+            self._values["enable_fault_injection"] = enable_fault_injection
         if execution_role is not None:
             self._values["execution_role"] = execution_role
         if family is not None:
@@ -26327,6 +26434,17 @@ class ExternalTaskDefinitionProps(CommonTaskDefinitionProps):
         if network_mode is not None:
             self._values["network_mode"] = network_mode
 
+    @builtins.property
+    def enable_fault_injection(self) -> typing.Optional[builtins.bool]:
+        '''Enables fault injection and allows for fault injection requests to be accepted from the task's containers.
+
+        Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes.
+
+        :default: undefined - ECS default setting is false
+        '''
+        result = self._values.get("enable_fault_injection")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def execution_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf.
@@ -26640,6 +26758,7 @@ class FargateServiceProps(BaseServiceOptions):
             service = ecs.FargateService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 deployment_alarms=ecs.DeploymentAlarmConfig(
                     alarm_names=[elb_alarm.alarm_name],
                     behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -27094,6 +27213,7 @@ class FargateTaskDefinitionAttributes(CommonTaskDefinitionAttributes):
     jsii_type="aws-cdk-lib.aws_ecs.FargateTaskDefinitionProps",
     jsii_struct_bases=[CommonTaskDefinitionProps],
     name_mapping={
+        "enable_fault_injection": "enableFaultInjection",
         "execution_role": "executionRole",
         "family": "family",
         "proxy_configuration": "proxyConfiguration",
@@ -27110,6 +27230,7 @@ class FargateTaskDefinitionProps(CommonTaskDefinitionProps):
     def __init__(
         self,
         *,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional["ProxyConfiguration"] = None,
@@ -27123,6 +27244,7 @@ class FargateTaskDefinitionProps(CommonTaskDefinitionProps):
     ) -> None:
         '''The properties for a task definition.
 
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -27152,6 +27274,7 @@ class FargateTaskDefinitionProps(CommonTaskDefinitionProps):
             runtime_platform = RuntimePlatform(**runtime_platform)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__da4d0b48fbacde979163c93d7fd8d5697220f750806124aabb65f0c3d34fd6ea)
+            check_type(argname="argument enable_fault_injection", value=enable_fault_injection, expected_type=type_hints["enable_fault_injection"])
             check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
             check_type(argname="argument family", value=family, expected_type=type_hints["family"])
             check_type(argname="argument proxy_configuration", value=proxy_configuration, expected_type=type_hints["proxy_configuration"])
@@ -27163,6 +27286,8 @@ class FargateTaskDefinitionProps(CommonTaskDefinitionProps):
             check_type(argname="argument pid_mode", value=pid_mode, expected_type=type_hints["pid_mode"])
             check_type(argname="argument runtime_platform", value=runtime_platform, expected_type=type_hints["runtime_platform"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if enable_fault_injection is not None:
+            self._values["enable_fault_injection"] = enable_fault_injection
         if execution_role is not None:
             self._values["execution_role"] = execution_role
         if family is not None:
@@ -27184,6 +27309,17 @@ class FargateTaskDefinitionProps(CommonTaskDefinitionProps):
         if runtime_platform is not None:
             self._values["runtime_platform"] = runtime_platform
 
+    @builtins.property
+    def enable_fault_injection(self) -> typing.Optional[builtins.bool]:
+        '''Enables fault injection and allows for fault injection requests to be accepted from the task's containers.
+
+        Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes.
+
+        :default: undefined - ECS default setting is false
+        '''
+        result = self._values.get("enable_fault_injection")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def execution_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf.
@@ -27385,7 +27521,8 @@ class FileSystemType(enum.Enum):
         
         service = ecs.FargateService(self, "FargateService",
             cluster=cluster,
-            task_definition=task_definition
+            task_definition=task_definition,
+            min_healthy_percent=100
         )
         
         service.add_volume(volume)
@@ -30206,6 +30343,7 @@ class HealthCheck:
                 vpc=vpc,
                 memory_limit_mi_b=512,
                 image=ecs.ContainerImage.from_registry("test"),
+                min_healthy_percent=100,
                 health_check=ecs.HealthCheck(
                     command=["CMD-SHELL", "curl -f http://localhost/ || exit 1"],
                     # the properties below are optional
@@ -31397,7 +31535,7 @@ class ListenerConfig(
         # task_definition: ecs.TaskDefinition
         # vpc: ec2.Vpc
         
-        service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition)
+        service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
         
         lb = elbv2.ApplicationLoadBalancer(self, "LB", vpc=vpc, internet_facing=True)
         listener = lb.add_listener("Listener", port=80)
@@ -31593,7 +31731,7 @@ class LoadBalancerTargetOptions:
             # task_definition: ecs.TaskDefinition
             # vpc: ec2.Vpc
             
-            service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition)
+            service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
             
             lb = elb.LoadBalancer(self, "LB", vpc=vpc)
             lb.add_listener(external_port=80)
@@ -32357,7 +32495,8 @@ class MemoryUtilizationScalingProps(_BaseTargetTrackingProps_540ba713):
                 cpu=512,
                 task_image_options=ecsPatterns.ApplicationLoadBalancedTaskImageOptions(
                     image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample")
-                )
+                ),
+                min_healthy_percent=100
             )
             
             scalable_target = load_balanced_fargate_service.service.auto_scale_task_count(
@@ -33235,6 +33374,7 @@ class Protocol(enum.Enum):
         ecs.Ec2Service(self, "Service",
             cluster=cluster,
             task_definition=task_definition,
+            min_healthy_percent=100,
             cloud_map_options=ecs.CloudMapOptions(
                 # Create SRV records - useful for bridge networking
                 dns_record_type=cloudmap.DnsRecordType.SRV,
@@ -33630,20 +33770,19 @@ class RuntimePlatform:
 
         Example::
 
-            # Create a Task Definition for the Windows container to start
-            task_definition = ecs.FargateTaskDefinition(self, "TaskDef",
-                runtime_platform=ecs.RuntimePlatform(
-                    operating_system_family=ecs.OperatingSystemFamily.WINDOWS_SERVER_2019_CORE,
-                    cpu_architecture=ecs.CpuArchitecture.X86_64
-                ),
-                cpu=1024,
-                memory_limit_mi_b=2048
-            )
+            # cluster: ecs.Cluster
             
-            task_definition.add_container("windowsservercore",
-                logging=ecs.LogDriver.aws_logs(stream_prefix="win-iis-on-fargate"),
-                port_mappings=[ecs.PortMapping(container_port=80)],
-                image=ecs.ContainerImage.from_registry("mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2019")
+            application_load_balanced_fargate_service = ecs_patterns.ApplicationLoadBalancedFargateService(self, "Service",
+                cluster=cluster,
+                memory_limit_mi_b=512,
+                task_image_options=ecsPatterns.ApplicationLoadBalancedTaskImageOptions(
+                    image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample")
+                ),
+                min_healthy_percent=100,
+                runtime_platform=ecs.RuntimePlatform(
+                    cpu_architecture=ecs.CpuArchitecture.ARM64,
+                    operating_system_family=ecs.OperatingSystemFamily.LINUX
+                )
             )
         '''
         if __debug__:
@@ -33757,7 +33896,8 @@ class ScalableTaskCount(
             cpu=512,
             task_image_options=ecsPatterns.ApplicationLoadBalancedTaskImageOptions(
                 image=ecs.ContainerImage.from_registry("amazon/amazon-ecs-sample")
-            )
+            ),
+            min_healthy_percent=100
         )
         
         scalable_target = load_balanced_fargate_service.service.auto_scale_task_count(
@@ -34613,6 +34753,7 @@ class ServiceConnectProps:
             custom_service = ecs.FargateService(self, "CustomizedService",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 service_connect_configuration=ecs.ServiceConnectProps(
                     log_driver=ecs.LogDrivers.aws_logs(
                         stream_prefix="sc-traffic"
@@ -34938,7 +35079,8 @@ class ServiceManagedEBSVolumeConfiguration:
             
             service = ecs.FargateService(self, "FargateService",
                 cluster=cluster,
-                task_definition=task_definition
+                task_definition=task_definition,
+                min_healthy_percent=100
             )
             
             service.add_volume(volume)
@@ -35165,7 +35307,8 @@ class ServiceManagedVolume(
         
         service = ecs.FargateService(self, "FargateService",
             cluster=cluster,
-            task_definition=task_definition
+            task_definition=task_definition,
+            min_healthy_percent=100
         )
         
         service.add_volume(volume)
@@ -35303,7 +35446,8 @@ class ServiceManagedVolumeProps:
             
             service = ecs.FargateService(self, "FargateService",
                 cluster=cluster,
-                task_definition=task_definition
+                task_definition=task_definition,
+                min_healthy_percent=100
             )
             
             service.add_volume(volume)
@@ -36432,7 +36576,7 @@ class TaskDefinition(
         # task_definition: ecs.TaskDefinition
         # vpc: ec2.Vpc
         
-        service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition)
+        service = ecs.FargateService(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
         
         lb = elbv2.ApplicationLoadBalancer(self, "LB", vpc=vpc, internet_facing=True)
         listener = lb.add_listener("Listener", port=80)
@@ -36461,6 +36605,7 @@ class TaskDefinition(
         pid_mode: typing.Optional[PidMode] = None,
         placement_constraints: typing.Optional[typing.Sequence[PlacementConstraint]] = None,
         runtime_platform: typing.Optional[typing.Union[RuntimePlatform, typing.Dict[builtins.str, typing.Any]]] = None,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -36481,6 +36626,7 @@ class TaskDefinition(
         :param pid_mode: The process namespace to use for the containers in the task. Only supported for tasks that are hosted on AWS Fargate if the tasks are using platform version 1.4.0 or later (Linux). Only the TASK option is supported for Linux-based Fargate containers. Not supported in Windows containers. If pidMode is specified for a Fargate task, then runtimePlatform.operatingSystemFamily must also be specified. For more information, see `Task Definition Parameters <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_definition_pidmode>`_. Default: - PidMode used by the task is not specified
         :param placement_constraints: The placement constraints to use for tasks in the service. You can specify a maximum of 10 constraints per task (this limit includes constraints in the task definition and those specified at run time). Not supported in Fargate. Default: - No placement constraints.
         :param runtime_platform: The operating system that your task definitions are running on. A runtimePlatform is supported only for tasks using the Fargate launch type. Default: - Undefined.
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -36502,6 +36648,7 @@ class TaskDefinition(
             pid_mode=pid_mode,
             placement_constraints=placement_constraints,
             runtime_platform=runtime_platform,
+            enable_fault_injection=enable_fault_injection,
             execution_role=execution_role,
             family=family,
             proxy_configuration=proxy_configuration,
@@ -37234,6 +37381,7 @@ class TaskDefinitionAttributes(CommonTaskDefinitionAttributes):
     jsii_type="aws-cdk-lib.aws_ecs.TaskDefinitionProps",
     jsii_struct_bases=[CommonTaskDefinitionProps],
     name_mapping={
+        "enable_fault_injection": "enableFaultInjection",
         "execution_role": "executionRole",
         "family": "family",
         "proxy_configuration": "proxyConfiguration",
@@ -37255,6 +37403,7 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
     def __init__(
         self,
         *,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -37273,6 +37422,7 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
     ) -> None:
         '''The properties for task definitions.
 
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -37327,6 +37477,7 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
             runtime_platform = RuntimePlatform(**runtime_platform)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__94a3565a38b8645ada9c86c3d7ac059ba028553c5ec103fcd16884f758cda48d)
+            check_type(argname="argument enable_fault_injection", value=enable_fault_injection, expected_type=type_hints["enable_fault_injection"])
             check_type(argname="argument execution_role", value=execution_role, expected_type=type_hints["execution_role"])
             check_type(argname="argument family", value=family, expected_type=type_hints["family"])
             check_type(argname="argument proxy_configuration", value=proxy_configuration, expected_type=type_hints["proxy_configuration"])
@@ -37345,6 +37496,8 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "compatibility": compatibility,
         }
+        if enable_fault_injection is not None:
+            self._values["enable_fault_injection"] = enable_fault_injection
         if execution_role is not None:
             self._values["execution_role"] = execution_role
         if family is not None:
@@ -37374,6 +37527,17 @@ class TaskDefinitionProps(CommonTaskDefinitionProps):
         if runtime_platform is not None:
             self._values["runtime_platform"] = runtime_platform
 
+    @builtins.property
+    def enable_fault_injection(self) -> typing.Optional[builtins.bool]:
+        '''Enables fault injection and allows for fault injection requests to be accepted from the task's containers.
+
+        Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes.
+
+        :default: undefined - ECS default setting is false
+        '''
+        result = self._values.get("enable_fault_injection")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def execution_role(self) -> typing.Optional[_IRole_235f5d8e]:
         '''The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf.
@@ -37606,6 +37770,7 @@ class TaskDefinitionRevision(
             cluster=cluster,
             task_definition=task_definition,
             desired_count=5,
+            min_healthy_percent=100,
             task_definition_revision=ecs.TaskDefinitionRevision.of(1)
         )
         
@@ -37613,6 +37778,7 @@ class TaskDefinitionRevision(
             cluster=cluster,
             task_definition=task_definition,
             desired_count=5,
+            min_healthy_percent=100,
             task_definition_revision=ecs.TaskDefinitionRevision.LATEST
         )
     '''
@@ -38118,7 +38284,8 @@ class Volume:
             task_definition.add_volume(volume_from_snapshot)
             service = ecs.FargateService(self, "FargateService",
                 cluster=cluster,
-                task_definition=task_definition
+                task_definition=task_definition,
+                min_healthy_percent=100
             )
             
             service.add_volume(volume_from_snapshot)
@@ -38932,7 +39099,7 @@ class Cluster(
         '''This method adds an Auto Scaling Group Capacity Provider to a cluster.
 
         :param provider: the capacity provider to add to this cluster.
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -38997,7 +39164,7 @@ class Cluster(
         :param id: -
         :param instance_type: The EC2 instance type to use when launching instances into the AutoScalingGroup.
         :param machine_image: The ECS-optimized AMI variant to use. The default is to use an ECS-optimized AMI of Amazon Linux 2 which is automatically updated to the latest version on every deployment. This will replace the instances in the AutoScalingGroup. Make sure you have not disabled task draining, to avoid downtime when the AMI updates. To use an image that does not update on every deployment, pass:: const machineImage = ecs.EcsOptimizedImage.amazonLinux2(ecs.AmiHardwareType.STANDARD, { cachedInContext: true, }); For more information, see `Amazon ECS-optimized AMIs <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html>`_. You must define either ``machineImage`` or ``machineImageType``, not both. Default: - Automatically updated, ECS-optimized Amazon Linux 2
-        :param can_containers_access_instance_role: Specifies whether the containers can access the container instance role. Default: false
+        :param can_containers_access_instance_role: (deprecated) Specifies whether the containers can access the container instance role. Default: true if
         :param machine_image_type: What type of machine image this is. Depending on the setting, different UserData will automatically be added to the ``AutoScalingGroup`` to configure it properly for use with ECS. If you create an ``AutoScalingGroup`` yourself and are adding it via ``addAutoScalingGroup()``, you must specify this value. If you are adding an ``autoScalingGroup`` via ``addCapacity``, this value will be determined from the ``machineImage`` you pass. Default: - Automatically determined from ``machineImage``, if available, otherwise ``MachineImageType.AMAZON_LINUX_2``.
         :param spot_instance_draining: Specify whether to enable Automated Draining for Spot Instances running Amazon ECS Services. For more information, see `Using Spot Instances <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-instance-spot.html>`_. Default: false
         :param topic_encryption_key: If ``AddAutoScalingGroupCapacityOptions.taskDrainTime`` is non-zero, then the ECS cluster creates an SNS Topic to as part of a system to drain instances of tasks when the instance is being shut down. If this property is provided, then this key will be used to encrypt the contents of that SNS Topic. See `SNS Data Encryption <https://docs.aws.amazon.com/sns/latest/dg/sns-data-encryption.html>`_ for more information. Default: The SNS Topic will not be encrypted.
@@ -39155,6 +39322,8 @@ class Cluster(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -39167,6 +39336,8 @@ class Cluster(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
         '''
@@ -39180,6 +39351,8 @@ class Cluster(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -39196,6 +39369,8 @@ class Cluster(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -39207,6 +39382,8 @@ class Cluster(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -39219,6 +39396,8 @@ class Cluster(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -39235,6 +39414,8 @@ class Cluster(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -39246,6 +39427,8 @@ class Cluster(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -39258,6 +39441,8 @@ class Cluster(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -39274,6 +39459,8 @@ class Cluster(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -39285,6 +39472,8 @@ class Cluster(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -39297,6 +39486,8 @@ class Cluster(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -39313,6 +39504,8 @@ class Cluster(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -39324,6 +39517,8 @@ class Cluster(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -39336,6 +39531,8 @@ class Cluster(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -39441,6 +39638,7 @@ class DeploymentAlarmConfig(DeploymentAlarmOptions):
             service = ecs.FargateService(self, "Service",
                 cluster=cluster,
                 task_definition=task_definition,
+                min_healthy_percent=100,
                 deployment_alarms=ecs.DeploymentAlarmConfig(
                     alarm_names=[elb_alarm.alarm_name],
                     behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -40438,6 +40636,8 @@ class BaseService(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -40450,6 +40650,8 @@ class BaseService(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
         '''
@@ -40463,6 +40665,8 @@ class BaseService(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -40479,6 +40683,8 @@ class BaseService(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -40490,6 +40696,8 @@ class BaseService(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -40502,6 +40710,8 @@ class BaseService(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -40518,6 +40728,8 @@ class BaseService(
         label: typing.Optional[builtins.str] = None,
         period: typing.Optional[_Duration_4839e8c3] = None,
         region: typing.Optional[builtins.str] = None,
+        stack_account: typing.Optional[builtins.str] = None,
+        stack_region: typing.Optional[builtins.str] = None,
         statistic: typing.Optional[builtins.str] = None,
         unit: typing.Optional[_Unit_61bc6f70] = None,
     ) -> _Metric_e396a4dc:
@@ -40529,6 +40741,8 @@ class BaseService(
         :param label: Label for this metric when added to a Graph in a Dashboard. You can use `dynamic labels <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/graph-dynamic-labels.html>`_ to show summary information about the entire displayed time series in the legend. For example, if you use:: [max: ${MAX}] MyMetric As the metric label, the maximum value in the visible range will be shown next to the time series name in the graph's legend. Default: - No label
         :param period: The period over which the specified statistic is applied. Default: Duration.minutes(5)
         :param region: Region which this metric comes from. Default: - Deployment region.
+        :param stack_account: Account of the stack this metric is attached to. Default: - Deployment account.
+        :param stack_region: Region of the stack this metric is attached to. Default: - Deployment region.
         :param statistic: What function to use for aggregating. Use the ``aws_cloudwatch.Stats`` helper class to construct valid input strings. Can be one of the following: - "Minimum" | "min" - "Maximum" | "max" - "Average" | "avg" - "Sum" | "sum" - "SampleCount | "n" - "pNN.NN" - "tmNN.NN" | "tm(NN.NN%:NN.NN%)" - "iqm" - "wmNN.NN" | "wm(NN.NN%:NN.NN%)" - "tcNN.NN" | "tc(NN.NN%:NN.NN%)" - "tsNN.NN" | "ts(NN.NN%:NN.NN%)" Default: Average
         :param unit: Unit used to filter the metric stream. Only refer to datums emitted to the metric stream with the given unit and ignore all others. Only useful when datums are being emitted to the same metric stream under different units. The default is to use all matric datums in the stream, regardless of unit, which is recommended in nearly all cases. CloudWatch does not honor this property for graphs. Default: - All metric datums in the given metric stream
 
@@ -40541,6 +40755,8 @@ class BaseService(
             label=label,
             period=period,
             region=region,
+            stack_account=stack_account,
+            stack_region=stack_region,
             statistic=statistic,
             unit=unit,
         )
@@ -40725,7 +40941,7 @@ class Ec2Service(
         # task_definition: ecs.TaskDefinition
         # vpc: ec2.Vpc
         
-        service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition)
+        service = ecs.Ec2Service(self, "Service", cluster=cluster, task_definition=task_definition, min_healthy_percent=100)
         
         lb = elb.LoadBalancer(self, "LB", vpc=vpc)
         lb.add_listener(external_port=80)
@@ -40944,6 +41160,7 @@ class Ec2TaskDefinition(
         network_mode: typing.Optional[NetworkMode] = None,
         pid_mode: typing.Optional[PidMode] = None,
         placement_constraints: typing.Optional[typing.Sequence[PlacementConstraint]] = None,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -40959,6 +41176,7 @@ class Ec2TaskDefinition(
         :param network_mode: The Docker networking mode to use for the containers in the task. The valid values are NONE, BRIDGE, AWS_VPC, and HOST. Default: - NetworkMode.BRIDGE for EC2 tasks, AWS_VPC for Fargate tasks.
         :param pid_mode: The process namespace to use for the containers in the task. Not supported in Windows containers. Default: - PidMode used by the task is not specified
         :param placement_constraints: An array of placement constraint objects to use for the task. You can specify a maximum of 10 constraints per task (this limit includes constraints in the task definition and those specified at run time). Default: - No placement constraints.
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -40975,6 +41193,7 @@ class Ec2TaskDefinition(
             network_mode=network_mode,
             pid_mode=pid_mode,
             placement_constraints=placement_constraints,
+            enable_fault_injection=enable_fault_injection,
             execution_role=execution_role,
             family=family,
             proxy_configuration=proxy_configuration,
@@ -41194,7 +41413,8 @@ class ExternalService(
         service = ecs.ExternalService(self, "Service",
             cluster=cluster,
             task_definition=task_definition,
-            desired_count=5
+            desired_count=5,
+            min_healthy_percent=100
         )
     '''
 
@@ -41496,6 +41716,7 @@ class ExternalTaskDefinition(
         id: builtins.str,
         *,
         network_mode: typing.Optional[NetworkMode] = None,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -41507,6 +41728,7 @@ class ExternalTaskDefinition(
         :param scope: -
         :param id: -
         :param network_mode: The networking mode to use for the containers in the task. With ECS Anywhere, supported modes are bridge, host and none. Default: NetworkMode.BRIDGE
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -41519,6 +41741,7 @@ class ExternalTaskDefinition(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = ExternalTaskDefinitionProps(
             network_mode=network_mode,
+            enable_fault_injection=enable_fault_injection,
             execution_role=execution_role,
             family=family,
             proxy_configuration=proxy_configuration,
@@ -41625,6 +41848,7 @@ class FargateService(
         service = ecs.FargateService(self, "Service",
             cluster=cluster,
             task_definition=task_definition,
+            min_healthy_percent=100,
             deployment_alarms=ecs.DeploymentAlarmConfig(
                 alarm_names=[elb_alarm.alarm_name],
                 behavior=ecs.AlarmBehavior.ROLLBACK_ON_ALARM
@@ -41811,6 +42035,7 @@ class FargateTaskDefinition(
         ecs.FargateService(self, "FargateService",
             cluster=cluster,
             task_definition=task_definition,
+            min_healthy_percent=100,
             capacity_provider_strategies=[ecs.CapacityProviderStrategy(
                 capacity_provider="FARGATE_SPOT",
                 weight=2
@@ -41832,6 +42057,7 @@ class FargateTaskDefinition(
         memory_limit_mib: typing.Optional[jsii.Number] = None,
         pid_mode: typing.Optional[PidMode] = None,
         runtime_platform: typing.Optional[typing.Union[RuntimePlatform, typing.Dict[builtins.str, typing.Any]]] = None,
+        enable_fault_injection: typing.Optional[builtins.bool] = None,
         execution_role: typing.Optional[_IRole_235f5d8e] = None,
         family: typing.Optional[builtins.str] = None,
         proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -41847,6 +42073,7 @@ class FargateTaskDefinition(
         :param memory_limit_mib: The amount (in MiB) of memory used by the task. For tasks using the Fargate launch type, this field is required and you must use one of the following values, which determines your range of valid values for the cpu parameter: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) - Available cpu values: 256 (.25 vCPU) 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) - Available cpu values: 512 (.5 vCPU) 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) - Available cpu values: 1024 (1 vCPU) Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) - Available cpu values: 2048 (2 vCPU) Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) - Available cpu values: 4096 (4 vCPU) Between 16384 (16 GB) and 61440 (60 GB) in increments of 4096 (4 GB) - Available cpu values: 8192 (8 vCPU) Between 32768 (32 GB) and 122880 (120 GB) in increments of 8192 (8 GB) - Available cpu values: 16384 (16 vCPU) Default: 512
         :param pid_mode: The process namespace to use for the containers in the task. Only supported for tasks that are hosted on AWS Fargate if the tasks are using platform version 1.4.0 or later (Linux). Only the TASK option is supported for Linux-based Fargate containers. Not supported in Windows containers. If pidMode is specified for a Fargate task, then runtimePlatform.operatingSystemFamily must also be specified. For more information, see `Task Definition Parameters <https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_definition_pidmode>`_. Default: - PidMode used by the task is not specified
         :param runtime_platform: The operating system that your task definitions are running on. A runtimePlatform is supported only for tasks using the Fargate launch type. Default: - Undefined.
+        :param enable_fault_injection: Enables fault injection and allows for fault injection requests to be accepted from the task's containers. Fault injection only works with tasks using the {@link NetworkMode.AWS_VPC} or {@link NetworkMode.HOST} network modes. Default: undefined - ECS default setting is false
         :param execution_role: The name of the IAM task execution role that grants the ECS agent permission to call AWS APIs on your behalf. The role will be used to retrieve container images from ECR and create CloudWatch log groups. Default: - An execution role will be automatically created if you use ECR images in your task definition.
         :param family: The name of a family that this task definition is registered to. A family groups multiple versions of a task definition. Default: - Automatically generated name.
         :param proxy_configuration: The configuration details for the App Mesh proxy. Default: - No proxy configuration.
@@ -41863,6 +42090,7 @@ class FargateTaskDefinition(
             memory_limit_mib=memory_limit_mib,
             pid_mode=pid_mode,
             runtime_platform=runtime_platform,
+            enable_fault_injection=enable_fault_injection,
             execution_role=execution_role,
             family=family,
             proxy_configuration=proxy_configuration,
@@ -43926,6 +44154,7 @@ def _typecheckingstub__1a458c1ea772685ddb7eb49b075e7de9bed322fac4bbee8aeab1cf6b5
 
 def _typecheckingstub__c1277747b28f7882811be2d0e701d4bf9aa7e64beeaa64689d3e2d7c2d8099c4(
     *,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -44426,6 +44655,7 @@ def _typecheckingstub__e90e61a002f578b0dbe160c067f2d3de15287892110df7eedcbbfa7f0
 
 def _typecheckingstub__11bd13308faca16514041c56d48a3f2515c80d4039888b53668ceaca5b37dc0e(
     *,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -44617,6 +44847,7 @@ def _typecheckingstub__2d58078e68b889d5f10f95714f42385491c26bf6ec084584b1a1487cc
 
 def _typecheckingstub__9b7789082516541a1aab36b1c591e13ce99110db761ab34a0d177950ecd704cb(
     *,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -44676,6 +44907,7 @@ def _typecheckingstub__5dd329152ba42239c8e48630ce2d0477a28dd88014af62f4536ef752f
 
 def _typecheckingstub__da4d0b48fbacde979163c93d7fd8d5697220f750806124aabb65f0c3d34fd6ea(
     *,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -45528,6 +45760,7 @@ def _typecheckingstub__5d3bab44746554175b0727c47a3323dddca1cb0a8c9aeaf3a04d50745
     pid_mode: typing.Optional[PidMode] = None,
     placement_constraints: typing.Optional[typing.Sequence[PlacementConstraint]] = None,
     runtime_platform: typing.Optional[typing.Union[RuntimePlatform, typing.Dict[builtins.str, typing.Any]]] = None,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -45710,6 +45943,7 @@ def _typecheckingstub__723c7f01009409e12e945705433183d486be735607b50d3b8dd0ec765
 
 def _typecheckingstub__94a3565a38b8645ada9c86c3d7ac059ba028553c5ec103fcd16884f758cda48d(
     *,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -45981,6 +46215,8 @@ def _typecheckingstub__35d18b54e19d86c5562f997d757fcd71f57fa6d194d5ed055020a0ad2
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
+    stack_account: typing.Optional[builtins.str] = None,
+    stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
 ) -> None:
@@ -46105,6 +46341,8 @@ def _typecheckingstub__fb3b6cd83a49e029a6aab0309e4bf6a856a09b82a0d6752ebc4b80577
     label: typing.Optional[builtins.str] = None,
     period: typing.Optional[_Duration_4839e8c3] = None,
     region: typing.Optional[builtins.str] = None,
+    stack_account: typing.Optional[builtins.str] = None,
+    stack_region: typing.Optional[builtins.str] = None,
     statistic: typing.Optional[builtins.str] = None,
     unit: typing.Optional[_Unit_61bc6f70] = None,
 ) -> None:
@@ -46219,6 +46457,7 @@ def _typecheckingstub__3a26b01aaf87e4ece20469628f4af696fcfbad789e85b4622bd3e2092
     network_mode: typing.Optional[NetworkMode] = None,
     pid_mode: typing.Optional[PidMode] = None,
     placement_constraints: typing.Optional[typing.Sequence[PlacementConstraint]] = None,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -46365,6 +46604,7 @@ def _typecheckingstub__25b55dcc2f392f43c73212a21ab06c0332f2268cf71836b4f6c005109
     id: builtins.str,
     *,
     network_mode: typing.Optional[NetworkMode] = None,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,
@@ -46452,6 +46692,7 @@ def _typecheckingstub__d6eac52d828f2df0ab5e16014f889cf23534875319ae4b479cd554d53
     memory_limit_mib: typing.Optional[jsii.Number] = None,
     pid_mode: typing.Optional[PidMode] = None,
     runtime_platform: typing.Optional[typing.Union[RuntimePlatform, typing.Dict[builtins.str, typing.Any]]] = None,
+    enable_fault_injection: typing.Optional[builtins.bool] = None,
     execution_role: typing.Optional[_IRole_235f5d8e] = None,
     family: typing.Optional[builtins.str] = None,
     proxy_configuration: typing.Optional[ProxyConfiguration] = None,