Skip to content

Conversation

dylanratcliffe
Copy link
Member

No description provided.

Copy link

Overmind

Open in Overmind ↗


✨ami_update

🔴 Change Signals

Routine 🔴 ▅▃▂▁ AWS ECS task definitions showing first ever modifications, which is unusual compared to typical patterns.

View signals ↗


🔥 Risks

Potential Health Check Failures Due to Port Mismatch in ECS Task Definition ❗Medium Open Risk ↗
The change to update the health check command port from 1234 to 8080 in the ECS task definition poses a risk of health check failures. The container's port mapping remains at 1234, and there is no evidence that the application is configured to listen on port 8080. Additionally, network configurations such as security groups or network ACLs have not been updated to allow traffic on port 8080. These factors could lead to the ECS service marking tasks as unhealthy, causing unnecessary restarts or scaling actions.


🟣 Expected Changes

+/- ecs-task-definition › facial-recognition-terraform-example
- arn: arn:aws:ecs:eu-west-2:540044833068:task-definition/facial-recognition-terraform-example:7
+ arn: (known after apply)
- arn_without_revision: arn:aws:ecs:eu-west-2:540044833068:task-definition/facial-recognition-terraform-example
+ arn_without_revision: (known after apply)
- container_definitions: [{"cpu":1024,"environment":[{"name":"DATABASE_URL","value":"tf-20240827194315707700000013.cnx7xf6hwmba.eu-west-2.rds.amazonaws.com"}],"essential":true,"healthCheck":{"command":["CMD-SHELL","wget -q --spider localhost:1234"],"interval":30,"retries":3,"timeout":5},"image":"harshmanvar/face-detection-tensorjs:slim-amd","memory":2048,"mountPoints":[],"name":"facial-recognition","portMappings":[{"appProtocol":"http","containerPort":1234,"hostPort":1234,"protocol":"tcp"}],"systemControls":[],"volumesFrom":[]}]
+ container_definitions: [{"cpu":1024,"environment":[{"name":"DATABASE_URL","value":"tf-20240827194315707700000013.cnx7xf6hwmba.eu-west-2.rds.amazonaws.com"}],"essential":true,"healthCheck":{"command":["CMD-SHELL","wget -q --spider localhost:8080"],"interval":30,"retries":3,"timeout":5},"image":"harshmanvar/face-detection-tensorjs:slim-amd","memory":2048,"mountPoints":[],"name":"facial-recognition","portMappings":[{"appProtocol":"http","containerPort":1234}],"volumesFrom":[]}]
- enable_fault_injection: false
+ enable_fault_injection: (known after apply)
- execution_role_arn: 
+ execution_role_arn: <nil>
- id: facial-recognition-terraform-example
+ id: (known after apply)
- ipc_mode: 
+ ipc_mode: <nil>
- pid_mode: 
+ pid_mode: <nil>
- revision: 7
+ revision: (known after apply)
+ tags: <nil>
+ tags_all: (known after apply)
- task_role_arn: 
+ task_role_arn: <nil>
+/- ec2-instance › i-0e56e0f8eb58a4cf0
- ami: ami-006aa762ec87a7afb
+ ami: ami-0174327c2510b4f8b
- arn: arn:aws:ec2:eu-west-2:540044833068:instance/i-0e56e0f8eb58a4cf0
+ arn: (known after apply)
- availability_zone: eu-west-2b
+ availability_zone: (known after apply)
- capacity_reservation_specification: [map[capacity_reservation_preference:open capacity_reservation_target:[]]]
+ capacity_reservation_specification: (known after apply)
- cpu_core_count: 1
+ cpu_core_count: (known after apply)
- cpu_options: [map[amd_sev_snp: core_count:1 threads_per_core:2]]
+ cpu_options: (known after apply)
- cpu_threads_per_core: 2
+ cpu_threads_per_core: (known after apply)
- credit_specification: [map[cpu_credits:unlimited]]
+ credit_specification: []
- disable_api_stop: false
+ disable_api_stop: (known after apply)
- disable_api_termination: false
+ disable_api_termination: (known after apply)
- ebs_block_device: []
+ ebs_block_device: (known after apply)
- ebs_optimized: false
+ ebs_optimized: (known after apply)
- enable_primary_ipv6: <nil>
+ enable_primary_ipv6: (known after apply)
- enclave_options: [map[enabled:false]]
+ enclave_options: (known after apply)
- ephemeral_block_device: []
+ ephemeral_block_device: (known after apply)
- hibernation: false
+ hibernation: <nil>
- host_id: 
+ host_id: (known after apply)
- host_resource_group_arn: <nil>
+ host_resource_group_arn: (known after apply)
- iam_instance_profile: 
+ iam_instance_profile: (known after apply)
- id: i-0e56e0f8eb58a4cf0
+ id: (known after apply)
- instance_initiated_shutdown_behavior: stop
+ instance_initiated_shutdown_behavior: (known after apply)
- instance_lifecycle: 
+ instance_lifecycle: (known after apply)
- instance_market_options: []
+ instance_market_options: (known after apply)
- instance_state: running
+ instance_state: (known after apply)
- ipv6_address_count: 0
+ ipv6_address_count: (known after apply)
- ipv6_addresses: []
+ ipv6_addresses: (known after apply)
- maintenance_options: [map[auto_recovery:default]]
+ maintenance_options: (known after apply)
- metadata_options: [map[http_endpoint:enabled http_protocol_ipv6:disabled http_put_response_hop_limit:1 http_tokens:optional instance_metadata_tags:disabled]]
+ metadata_options: (known after apply)
- monitoring: false
+ monitoring: (known after apply)
- network_interface: []
+ network_interface: (known after apply)
- outpost_arn: 
+ outpost_arn: (known after apply)
- password_data: 
+ password_data: (known after apply)
- placement_group: 
+ placement_group: (known after apply)
- placement_partition_number: 0
+ placement_partition_number: (known after apply)
- primary_network_interface_id: eni-03d8d79766b0341a3
+ primary_network_interface_id: (known after apply)
- private_dns: ip-10-0-10-44.eu-west-2.compute.internal
+ private_dns: (known after apply)
- private_dns_name_options: [map[enable_resource_name_dns_a_record:false enable_resource_name_dns_aaaa_record:false hostname_type:ip-name]]
+ private_dns_name_options: (known after apply)
- private_ip: 10.0.10.44
+ private_ip: (known after apply)
- public_dns: ec2-18-130-236-8.eu-west-2.compute.amazonaws.com
+ public_dns: (known after apply)
- public_ip: 18.130.236.8
+ public_ip: (known after apply)
- root_block_device: [map[delete_on_termination:true device_name:/dev/xvda encrypted:false iops:0 kms_key_id: tags:map[] tags_all:map[] throughput:0 volume_id:vol-0200e8799ecd1e004 volume_size:8 volume_type:standard]]
+ root_block_device: (known after apply)
- secondary_private_ips: []
+ secondary_private_ips: (known after apply)
- security_groups: []
+ security_groups: (known after apply)
- spot_instance_request_id: 
+ spot_instance_request_id: (known after apply)
- tenancy: default
+ tenancy: (known after apply)
- user_data: <nil>
+ user_data: (known after apply)
- user_data_base64: <nil>
+ user_data_base64: (known after apply)
+/- ec2-instance › i-0a427830cc9151c53
- ami: ami-006aa762ec87a7afb
+ ami: ami-0174327c2510b4f8b
- arn: arn:aws:ec2:eu-west-2:540044833068:instance/i-0a427830cc9151c53
+ arn: (known after apply)
- availability_zone: eu-west-2a
+ availability_zone: (known after apply)
- capacity_reservation_specification: [map[capacity_reservation_preference:open capacity_reservation_target:[]]]
+ capacity_reservation_specification: (known after apply)
- cpu_core_count: 1
+ cpu_core_count: (known after apply)
- cpu_options: [map[amd_sev_snp: core_count:1 threads_per_core:2]]
+ cpu_options: (known after apply)
- cpu_threads_per_core: 2
+ cpu_threads_per_core: (known after apply)
- credit_specification: [map[cpu_credits:unlimited]]
+ credit_specification: []
- disable_api_stop: false
+ disable_api_stop: (known after apply)
- disable_api_termination: false
+ disable_api_termination: (known after apply)
- ebs_block_device: []
+ ebs_block_device: (known after apply)
- ebs_optimized: false
+ ebs_optimized: (known after apply)
- enable_primary_ipv6: <nil>
+ enable_primary_ipv6: (known after apply)
- enclave_options: [map[enabled:false]]
+ enclave_options: (known after apply)
- ephemeral_block_device: []
+ ephemeral_block_device: (known after apply)
- hibernation: false
+ hibernation: <nil>
- host_id: 
+ host_id: (known after apply)
- host_resource_group_arn: <nil>
+ host_resource_group_arn: (known after apply)
- iam_instance_profile: 
+ iam_instance_profile: (known after apply)
- id: i-0a427830cc9151c53
+ id: (known after apply)
- instance_initiated_shutdown_behavior: stop
+ instance_initiated_shutdown_behavior: (known after apply)
- instance_lifecycle: 
+ instance_lifecycle: (known after apply)
- instance_market_options: []
+ instance_market_options: (known after apply)
- instance_state: running
+ instance_state: (known after apply)
- ipv6_address_count: 0
+ ipv6_address_count: (known after apply)
- ipv6_addresses: []
+ ipv6_addresses: (known after apply)
- maintenance_options: [map[auto_recovery:default]]
+ maintenance_options: (known after apply)
- metadata_options: [map[http_endpoint:enabled http_protocol_ipv6:disabled http_put_response_hop_limit:1 http_tokens:optional instance_metadata_tags:disabled]]
+ metadata_options: (known after apply)
- monitoring: false
+ monitoring: (known after apply)
- network_interface: []
+ network_interface: (known after apply)
- outpost_arn: 
+ outpost_arn: (known after apply)
- password_data: 
+ password_data: (known after apply)
- placement_group: 
+ placement_group: (known after apply)
- placement_partition_number: 0
+ placement_partition_number: (known after apply)
- primary_network_interface_id: eni-060632729be4b5c61
+ primary_network_interface_id: (known after apply)
- private_dns: ip-10-0-9-171.eu-west-2.compute.internal
+ private_dns: (known after apply)
- private_dns_name_options: [map[enable_resource_name_dns_a_record:false enable_resource_name_dns_aaaa_record:false hostname_type:ip-name]]
+ private_dns_name_options: (known after apply)
- private_ip: 10.0.9.171
+ private_ip: (known after apply)
- public_dns: ec2-35-178-235-99.eu-west-2.compute.amazonaws.com
+ public_dns: (known after apply)
- public_ip: 35.178.235.99
+ public_ip: (known after apply)
- root_block_device: [map[delete_on_termination:true device_name:/dev/xvda encrypted:false iops:0 kms_key_id: tags:map[] tags_all:map[] throughput:0 volume_id:vol-01da4063d55002995 volume_size:8 volume_type:standard]]
+ root_block_device: (known after apply)
- secondary_private_ips: []
+ secondary_private_ips: (known after apply)
- security_groups: []
+ security_groups: (known after apply)
- spot_instance_request_id: 
+ spot_instance_request_id: (known after apply)
- tenancy: default
+ tenancy: (known after apply)
- user_data: <nil>
+ user_data: (known after apply)
- user_data_base64: <nil>
+ user_data_base64: (known after apply)
~ ec2-launch-template › lt-0731f767e6be2ab94
- image_id: ami-006aa762ec87a7afb
+ image_id: ami-0174327c2510b4f8b
- latest_version: 17
+ latest_version: (known after apply)

🟠 Unmapped Changes

~ aws_ecs_service › module.scenarios[0].aws_ecs_service.face
- task_definition: arn:aws:ecs:eu-west-2:540044833068:task-definition/facial-recognition-terraform-example:7
+ task_definition: (known after apply)

💥 Blast Radius

Items 28

Edges 39

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant