3.1.7 Container Services (ECS, EKS, ECR)

Cluster → Service → Task (running container)
                     ↑
              Task Definition (blueprint)
              ├── Container image (ECR)
              ├── CPU / Memory
              ├── Port mappings
              ├── Environment variables
              ├── IAM Task Role
              └── Log configuration

# appspec.yaml cho ECS Blue/Green
version: 0.0
Resources:
  - TargetService:
      Type: AWS::ECS::Service
      Properties:
        TaskDefinition: "arn:aws:ecs:us-east-1:123:task-definition/my-app:2"
        LoadBalancerInfo:
          ContainerName: "my-app"
          ContainerPort: 8080

EKS Cluster → Node Group → Pods (running containers)
               ├── Managed Node Group (EC2)
               ├── Self-managed Nodes (EC2)
               └── Fargate Profile (serverless)

# Kubernetes deployment with health checks
livenessProbe:
  httpGet:
    path: /health
    port: 8080
  initialDelaySeconds: 15
  periodSeconds: 10
readinessProbe:
  httpGet:
    path: /ready
    port: 8080
  initialDelaySeconds: 5
  periodSeconds: 5

# Lifecycle policy — keep only last 10 images
aws ecr put-lifecycle-policy --repository-name my-app \
  --lifecycle-policy-text '{
    "rules": [{
      "rulePriority": 1,
      "selection": {
        "tagStatus": "any",
        "countType": "imageCountMoreThan",
        "countNumber": 10
      },
      "action": {"type": "expire"}
    }]
  }'