> ## Documentation Index > Fetch the complete documentation index at: https://www.ravion.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # ECS Web Service inputs: ECS cluster to environment variables > Reference the ECS Web Service module's ECS cluster, Web service, Domains, Build config, Docker, Railpack, Deployment, Health check and more inputs. **Type:** `rvn-ecs-web` / **Latest version:** `2.4.0` See [ECS Web Service module reference](/docs/module-definitions/catalog/rvn-ecs-web) for the full module page. ### ECS cluster **cluster** `$ref:rvn-ecs-cluster` *required* **Cluster.** * Immutable after creation Set `cluster` to `null`. Mapped inputs for `cluster`: set these keys alongside `cluster`, not inside it, when supplying existing infrastructure instead of a module reference. **aws\_account\_id** `string` **AWS account.** * Default: `<>` * Immutable after creation **aws\_region** `string` **Region.** * Default: `<>` * Immutable after creation **execution\_environment\_id** `string` **Terraform execution environment.** Terraform execution environment inherited from the selected ECS cluster. * Default: `<< ref.input.execution_environment_id >>` **cluster\_arn** `string` *required* **Cluster ARN.** * Default: `<>` * Immutable after creation **cluster\_log\_retention\_days** `number` **Cluster default log retention (days).** Default CloudWatch Logs retention inherited from the selected ECS cluster. Override it per service in the Compliance section. * Default: `<>` **vpc\_id** `string` *required* **VPC ID.** * Default: `<>` * Immutable after creation **private\_subnet\_ids** `string_array` *required* **Private subnet IDs.** Private subnets available from the selected ECS cluster network. * Default: `<>` * Immutable after creation **public\_subnet\_ids** `string_array` **Public subnet IDs.** Public subnets available from the selected ECS cluster network. * Default: `<>` * Immutable after creation **subnet\_ids** `string_array` **Private subnet IDs.** Legacy service subnet override. Leave blank to derive subnets from the public/private service setting. * Default: `<>` * Immutable after creation **section\_cluster\_capacity** `section` **Cluster capacity providers.** **fargate\_capacity\_provider\_name** `string` **Fargate capacity provider.** * Default: `<>` * Immutable after creation **fargate\_spot\_capacity\_provider\_name** `string` **Fargate spot capacity provider.** * Default: `<>` * Immutable after creation **ec2\_capacity\_provider\_name** `string` **EC2 capacity provider.** EC2 capacity provider name from the selected cluster. * Default: `<>` * Immutable after creation **section\_cluster\_alb** `section` **Cluster load balancers.** **public\_alb\_http\_listener\_arn** `string` **Public ALB HTTP listener ARN.** * Default: `<>` * Immutable after creation **public\_alb\_https\_listener\_arn** `string` **Public ALB HTTPS listener ARN.** HTTPS listener ARN from the selected public ALB. Ravion uses it when present, otherwise falls back to HTTP. * Default: `<>` * Immutable after creation **public\_alb\_security\_group\_id** `string` **Public ALB security group ID.** * Default: `<>` * Immutable after creation **private\_alb\_http\_listener\_arn** `string` **Private ALB HTTP listener ARN.** * Default: `<>` * Immutable after creation **private\_alb\_https\_listener\_arn** `string` **Private ALB HTTPS listener ARN.** HTTPS listener ARN from the selected private ALB. Ravion uses it when present, otherwise falls back to HTTP. * Default: `<>` * Immutable after creation **private\_alb\_security\_group\_id** `string` **Private ALB security group ID.** * Default: `<>` * Immutable after creation **ravion\_managed\_domains\_enabled** `boolean` **Ravion-managed domains.** On: Ravion manages service certificates and listener rules. Off: attach certificates on the cluster and configure listener rules here. * Default: `<< ref.stack.output.ravion_managed_domains_enabled || false >>` **cluster\_parent\_fqdn** `string` **Cluster domain.** Base for the service's Ravion address. * Default: `<>` **public\_alb\_dns\_name** `string` **Public ALB DNS name.** * Default: `<>` * Immutable after creation **public\_alb\_zone\_id** `string` **Public ALB hosted zone ID.** * Default: `<>` * Immutable after creation **private\_alb\_dns\_name** `string` **Private ALB DNS name.** * Default: `<>` * Immutable after creation **private\_alb\_zone\_id** `string` **Private ALB hosted zone ID.** * Default: `<>` * Immutable after creation **public\_alb\_arn\_suffix** `string` **Public ALB ARN suffix.** * Default: `<>` * Immutable after creation **private\_alb\_arn\_suffix** `string` **Private ALB ARN suffix.** * Default: `<>` * Immutable after creation ### Web service **name** `string` *required* **Service name.** Name for the ECS service and related resources. * Default: `<>-<>-<>` * Immutable after creation * Pattern: `^[A-Za-z0-9][A-Za-z0-9_-]{0,254}$` — Use 1-255 letters, numbers, underscores, or hyphens, starting with a letter or number. **public\_alb\_routing\_enabled** `boolean` **Public web service.** Expose this service through the public ALB. Turn off to use the private ALB. * Default: `true` **private\_subnet\_placement\_enabled** `boolean` **Run in private subnets.** Recommended. Requires a NAT gateway or equivalent for internet access and a static IP. * Default: `true` ### Domains **ravion\_domain\_enabled** `boolean` **Default Ravion domain.** Off requires at least one custom domain. * Default: `true` * Shown when: `{"ravion_managed_domains_enabled":true}` **ravion\_domain\_name** `string` **Subdomain.** * Default: `<< module.given_id >>` * Pattern: `^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$` — Use 1-63 lowercase letters, numbers, or hyphens, starting and ending with a letter or number. * Shown when: `{"ravion_domain_enabled":true,"ravion_managed_domains_enabled":true}` **domains** `string_array` **Custom domains.** Served alongside the default Ravion domain when it is on. Ravion manages certificates and listener rules; add the provided DNS records at your DNS provider. * Shown when: `{"ravion_managed_domains_enabled":true}` ### Build config **build\_source** `string` *required* **Build source.** * Default: `dockerfile` * Allowed values: `dockerfile` (Dockerfile), `railpack` (Railpack), `image_registry` (Pull from image registry), `ecr` (Managed ECR repository) **source\_repo** `gitrepo` *required* **Git repository.** Repository containing the application source for Dockerfile or Railpack builds. * Shown when: `{"build_source":["dockerfile","railpack"]}` **source\_base\_path** `string` **Source base path.** Repository-relative source and build root. * Default: `.` * Shown when: `{"build_source":["dockerfile","railpack"]}` **image\_repository** `string` *required* **Image repository.** Image repository without a tag or digest, such as `nginx`, `ghcr.io/org/app`, or `123456789012.dkr.ecr.us-east-1.amazonaws.com/app`. * Shown when: `{"build_source":"image_registry"}` **image\_registry\_credentials\_secret\_arn** `string` **Registry credentials secret ARN.** Secrets Manager secret ARN for private registries such as GHCR or Docker Hub. The secret must use the ECS repository credentials JSON format. Not needed for public images or normal same-account ECR. * Shown when: `{"build_source":"image_registry"}` **image\_start\_command** `string_array` **Start command.** Optional command arguments that override the image default command. For shell behavior, use `/bin/sh`, `-lc`, and your command string as separate arguments. * Default: `[]` * Shown when: `{"build_source":["image_registry","ecr"]}` ### Docker **dockerfile** `string` **Dockerfile path.** Path to the Dockerfile to use for the build, relative to the repository root or configured source base path. * Shown when: `{"build_source":"dockerfile"}` **dockerfile\_context** `string` **Docker build context path.** Directory to use as the Docker build context, relative to the repository root or configured source base path. * Shown when: `{"build_source":"dockerfile"}` ### Railpack **railpack\_version** `string` **Railpack version.** Optional Railpack version to use for the build. Leave blank to use the Ravion default. * Pattern: `^(|latest|v?[0-9]+\.[0-9]+\.[0-9]+(?:[-+][0-9A-Za-z.-]+)?)$` — Leave blank, use latest, a semantic version like 0.29.0, or a v-prefixed version like v0.29.0. * Shown when: `{"build_source":"railpack"}` **railpack\_install\_cmd** `string` **Install command.** Optional dependency installation command. Leave blank to use Railpack detection. * Shown when: `{"build_source":"railpack"}` **railpack\_build\_cmd** `string` **Build command.** Optional application build command. Leave blank to use Railpack detection. * Shown when: `{"build_source":"railpack"}` **railpack\_start\_cmd** `string` **Start command.** * Shown when: `{"build_source":"railpack"}` ### Deployment **deployment\_strategy** `string` *required* **Deployment strategy.** Choose how traffic moves from the current deployment to the new deployment. * Default: `rolling` * Allowed values: `rolling` (Rolling), `blue_green` (Blue/green), `linear` (Linear), `canary` (Canary) **deployment\_bake\_time\_in\_minutes** `number` **Bake time in minutes.** Minutes to keep the current and new deployments running after production traffic has fully shifted, before the old deployment is removed. * Default: `10` * Min: `0` * Max: `1440` * Shown when: `{"deployment_strategy":["blue_green","linear","canary"]}` **deployment\_success\_healthy\_percent** `number` **Healthy tasks required for success (%).** Percentage of desired tasks that must be running and healthy on the new revision. Must be at least Minimum healthy percent. ECS still requires one healthy task on nonzero services at 0%. Deployment rollback monitoring ends at success; remaining tasks scale in the background. * Default: `100` * Min: `<< module.input.deployment_minimum_healthy_percent >>` * Max: `100` * Shown when: `{"deployment_strategy":"rolling"}` **deployment\_wait\_for\_drain** `boolean` **Wait for old tasks to drain.** Choose whether old tasks must finish draining before deployment success. Alarm bake time still applies in both modes. * Default: `false` * Shown when: `{"deployment_strategy":"rolling"}` **linear\_step\_percentage** `number` **Linear step percentage.** Percentage of production traffic to move to the new deployment at each linear step. * Default: `20` * Min: `1` * Max: `100` * Shown when: `{"deployment_strategy":"linear"}` **linear\_step\_bake\_time\_in\_minutes** `number` **Linear step bake time in minutes.** Minutes to wait between linear traffic steps before shifting the next percentage. * Default: `5` * Min: `0` * Max: `1440` * Shown when: `{"deployment_strategy":"linear"}` **canary\_percent** `number` **Canary percent.** Percentage of production traffic to send to the new deployment during the canary phase. * Default: `5` * Min: `1` * Max: `100` * Shown when: `{"deployment_strategy":"canary"}` **canary\_bake\_time\_in\_minutes** `number` **Canary bake time in minutes.** Minutes to hold canary traffic before shifting the remaining production traffic to the new deployment. * Default: `10` * Min: `0` * Max: `1440` * Shown when: `{"deployment_strategy":"canary"}` **deployment\_pause\_stages** `object_array` **Manual approval gates.** Optional gates that pause the deployment at chosen lifecycle stages until you approve it. Applies only to the blue/green, linear, and canary strategies. * Default: `[{"stage":"POST_TEST_TRAFFIC_SHIFT","timeout_action":"ROLLBACK","timeout_in_minutes":1440}]` * Shown when: `{"deployment_strategy":["blue_green","linear","canary"]}` **item fields** **stage** `string` **Stage.** Deployment lifecycle stage at which to pause and wait for manual approval. * Default: `POST_TEST_TRAFFIC_SHIFT` * Allowed values: `RECONCILE_SERVICE` (Reconcile service), `PRE_SCALE_UP` (Pre scale up), `POST_SCALE_UP` (Post scale up), `POST_TEST_TRAFFIC_SHIFT` (Post test traffic shift), `PRE_PRODUCTION_TRAFFIC_SHIFT` (Pre production traffic shift), `POST_PRODUCTION_TRAFFIC_SHIFT` (Post production traffic shift) **timeout\_in\_minutes** `number` *required* **Timeout (minutes).** Minutes to wait for manual approval before the timeout action runs. Matches the AWS default of 1,440 minutes (24 hours). * Default: `1440` * Min: `1` * Max: `20160` **timeout\_action** `string` *required* **On timeout.** Action to take if approval is not given before the timeout elapses. Defaults to rolling back. * Default: `ROLLBACK` * Allowed values: `ROLLBACK` (Roll back), `CONTINUE` (Continue) ### Health check **container\_port** `number` *required* **Container port.** Port the web container listens on. * Default: `80` * Min: `1` * Max: `65535` * Immutable after creation **health\_check\_path** `string` *required* **Health check path.** HTTP path the load balancer calls to verify the web server is healthy. Use a lightweight endpoint that does not require authentication. * Default: `/` **health\_check\_matcher** `string` *required* **Success codes.** HTTP status code matcher for successful health checks. Defaults to 200-399 so redirects and common successful responses are accepted. * Default: `200-399` **health\_check\_interval** `number` **Interval (secs).** Seconds between load balancer health checks. Lower values detect failures faster but send more health-check traffic. * Default: `5` * Min: `5` * Max: `300` **health\_check\_timeout** `number` **Timeout (secs).** Seconds to wait for the health-check response before marking that check as failed. Must be lower than the interval. * Default: `4` * Min: `2` * Max: `120` **health\_check\_healthy\_threshold** `number` **Healthy threshold.** Number of consecutive successful checks required before an unhealthy target is considered healthy. * Default: `2` * Min: `2` * Max: `10` **health\_check\_unhealthy\_threshold** `number` **Unhealthy threshold.** Number of consecutive failed checks required before a target is considered unhealthy. * Default: `2` * Min: `2` * Max: `10` **health\_check\_grace\_period\_seconds** `number` **Health check grace period (secs).** Seconds ECS ignores failing load balancer health checks after a task starts. Increase this for apps with slow boot times. * Default: `0` * Min: `0` **target\_group\_deregistration\_delay** `number` **Deregistration delay (secs).** Seconds the load balancer allows in-flight requests to complete after a task starts deregistering. * Default: `300` * Min: `0` * Max: `3600` **target\_group\_slow\_start** `number` **Slow start duration (secs).** Gradually ramps traffic to newly registered targets. Use 0 to disable. * Default: `0` * Min: `0` * Max: `900` **target\_group\_stickiness\_enabled** `boolean` **Sticky sessions.** Enable load balancer cookie stickiness so repeat requests are routed to the same task when possible. When enabled, traffic-shift deployments also keep clients on the first production or alternate target group they reach. * Default: `true` **target\_group\_stickiness\_type** `string` **Stickiness type.** * Default: `lb_cookie` * Allowed values: `lb_cookie` (Load balancer cookie), `app_cookie` (Application cookie) * Shown when: `{"target_group_stickiness_enabled":true}` **target\_group\_stickiness\_cookie\_duration** `number` **Stickiness cookie duration (secs).** * Default: `86400` * Min: `1` * Max: `604800` * Shown when: `{"target_group_stickiness_enabled":true}` **target\_group\_stickiness\_cookie\_name** `string` **Application cookie name.** * Shown when: `{"target_group_stickiness_type":"app_cookie"}` ### HTTP listener rules **host\_header\_values** `string_array` **Domain host rules.** Hostnames that should route to this service, such as app.example.com or \*.example.com. Leave empty to use path-based routing. * Shown when: `{"ravion_managed_domains_enabled":false}` **path\_pattern\_values** `string_array` **Path rules.** Path patterns that should route to this service, such as /*, /api/*, or /app/*. If both domain host rules and path rules are empty, the service routes all paths with /*. * Shown when: `{"ravion_managed_domains_enabled":false}` **listener\_rule\_priority** `number` **Listener rule priority.** Optional ALB listener rule priority. Leave blank to let AWS assign the next available priority. * Min: `1` * Max: `50000` * Shown when: `{"ravion_managed_domains_enabled":false}` ### Container resources **capacity\_provider** `string` *required* **Capacity provider.** Choose the primary capacity provider. Most services should use only one provider. * Default: `fargate` * Allowed values: `fargate` (Fargate), `fargate_spot` (Fargate spot), `ec2` (EC2) **additional\_fargate\_capacity\_enabled** `boolean` **Also use Fargate.** Add Fargate to the capacity provider strategy in addition to the primary provider. * Default: `false` * Shown when: `{"capacity_provider":{"not":"fargate"}}` **additional\_fargate\_spot\_capacity\_enabled** `boolean` **Also use Fargate spot.** Add lower-cost interruptible Fargate spot capacity in addition to the primary provider. * Default: `false` * Shown when: `{"capacity_provider":{"not":"fargate_spot"}}` **additional\_ec2\_capacity\_enabled** `boolean` **Also use EC2.** Add EC2 capacity from the selected cluster in addition to the primary provider. * Default: `false` * Shown when: `{"capacity_provider":{"not":"ec2"}}` **fargate\_size** `compound` *required* **App size.** CPU and memory for Fargate tasks. Prices are estimated from AWS Fargate pricing for the selected region, architecture, and capacity provider. * Default: `{"memory_gb":4,"vcpu":2}` * Shown when: `{"capacity_provider":["fargate","fargate_spot"]}` **task\_ephemeral\_storage\_size\_gib** `number` **App ephemeral storage (GiB).** Optional ephemeral storage size for each Fargate app task, from 21 to 200 GiB. Leave blank to use the AWS default of 20 GiB. * Min: `21` * Max: `200` * Shown when: `{"capacity_provider":["fargate","fargate_spot"]}` **task\_cpu** `string` *required* **App vCPU.** vCPU reserved for each app task on EC2 capacity. Leave at least 0.25 vCPU unreserved on each EC2 instance for the ECS agent and system processes. * Default: `1.5` * Pattern: `^(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$` — Enter a vCPU value, such as 0.5, 1, or 2. * Shown when: `{"capacity_provider":"ec2"}` **task\_memory** `string` *required* **App memory in GB.** Memory reserved for each app task on EC2 capacity. Leave at least 0.5 GB unreserved on each EC2 instance for the ECS agent and system processes. * Default: `3.5` * Pattern: `^(?:0|[1-9][0-9]*)(?:\.[0-9]+)?$` — Enter a memory value in GB, such as 0.5, 1, or 4. * Shown when: `{"capacity_provider":"ec2"}` **cpu\_architecture** `string` **CPU architecture.** Use x86\_64 for broad compatibility; use ARM64 for lower cost when your image and dependencies support it. * Default: `X86_64` * Allowed values: `X86_64` (x86\_64 - widest compatibility), `ARM64` (ARM64 - lower cost) **execute\_command\_enabled** `boolean` **ECS exec.** Enable ECS Exec for interactive debugging in running containers. Leave off by default for tighter access control; turn on when operators need shell/debug access through AWS Systems Manager. * Default: `false` ### Autoscaling **auto\_scaling\_enabled** `boolean` **Autoscaling.** * Default: `true` **min\_tasks** `number` **Minimum tasks.** Recommend at least 2 for production. * Default: `1` * Min: `0` * Shown when: `{"auto_scaling_enabled":true}` **max\_tasks** `number` **Maximum tasks.** * Default: `3` * Min: `1` * Shown when: `{"auto_scaling_enabled":true}` **desired\_tasks** `number` **Desired tasks.** Number of tasks to keep running when autoscaling is disabled. * Default: `1` * Min: `1` * Shown when: `{"auto_scaling_enabled":false}` **cpu\_target\_value** `number` **CPU target (%).** * Default: `70` * Min: `1` * Max: `100` * Shown when: `{"auto_scaling_enabled":true}` **memory\_target\_value** `number` **Memory target (%).** Target average memory utilization for memory-based autoscaling. Leave blank to disable memory autoscaling. * Default: `80` * Min: `1` * Max: `100` * Shown when: `{"auto_scaling_enabled":true}` **scale\_in\_cooldown** `number` **Scale-in cooldown (secs).** Time after a scale-in activity before another scale-in can happen. AWS defaults ECS target tracking cooldowns to 300 secs; start here for production and tune if needed. * Default: `300` * Min: `0` * Shown when: `{"auto_scaling_enabled":true}` **scale\_out\_cooldown** `number` **Scale-out cooldown (secs).** Time after a scale-out activity before another scale-out can happen. AWS defaults ECS target tracking cooldowns to 300 secs; start here for production and tune if needed. * Default: `300` * Min: `0` * Shown when: `{"auto_scaling_enabled":true}` **scale\_in\_enabled** `boolean` **Scale in.** Allow autoscaling to reduce task count automatically. * Default: `true` * Shown when: `{"auto_scaling_enabled":true}` **scheduled\_scaling** `object_array` **Scheduled scaling actions.** Optional Application Auto Scaling scheduled actions for the ECS service desired tasks. Each action sets a recurring, one-time, or rate-based schedule and may update the minimum tasks, maximum tasks, or both. * Default: `[]` * Shown when: `{"auto_scaling_enabled":true}` **item fields** **name** `string` *required* **Action name.** Unique scheduled action name for this ECS service scalable target. AWS allows 1-256 characters and rejects leading/trailing spaces, control characters, colon, slash, and pipe. * Pattern: `^(?! )(?!.* $)(?!.*[\x00-\x1F\x7F-\x9F:/|]).{1,256}$` — Use 1-256 characters with no leading/trailing spaces and no control characters, colon, slash, or pipe. **schedule** `string` *required* **Schedule expression.** Application Auto Scaling schedule expression: at(yyyy-mm-ddThh:mm:ss), rate(value unit), or cron(fields). Cron normally uses six fields: minutes, hours, day-of-month, month, day-of-week, year. * Pattern: `^(at\(.+\)|rate\([1-9][0-9]* (minute|minutes|hour|hours|day|days)\)|cron\(.+\))$` — Use at(...), rate(value minute|minutes|hour|hours|day|days), or cron(...). **min\_tasks** `number` **Minimum tasks.** Optional desired-task floor to apply when this action runs. Set minimum tasks, maximum tasks, or both. * Min: `0` **max\_tasks** `number` **Maximum tasks.** Optional desired-task ceiling to apply when this action runs. Set maximum tasks, minimum tasks, or both. * Min: `0` **timezone** `string` **Time zone.** IANA/Joda-Time canonical time zone used for at() and cron() expressions. Defaults to UTC. Does not affect start\_time or end\_time. * Default: `UTC` * Pattern: `^[A-Za-z_+-]+(?:/[A-Za-z0-9_+.-]+)*$` — Use a canonical IANA/Joda-Time time zone such as UTC, America/New\_York, Etc/GMT+9, or Pacific/Tahiti. **start\_time** `string` **Start time.** Optional UTC boundary for when a recurring scheduled action starts. Terraform expects RFC 3339 format and this value is not affected by timezone. * Pattern: `^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$` — Use UTC RFC 3339 format, for example 2026-01-02T15:04:05Z. **end\_time** `string` **End time.** Optional UTC boundary for when a recurring scheduled action stops. Terraform expects RFC 3339 format and this value is not affected by timezone. * Pattern: `^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$` — Use UTC RFC 3339 format, for example 2026-01-02T23:04:05Z. **custom\_metric\_scaling\_policies** `object_array` **Custom metric scaling policies.** Additional target tracking scaling policies using custom CloudWatch metrics. Each policy must use a metric that changes proportionally with ECS service capacity. * Default: `[]` * Shown when: `{"auto_scaling_enabled":true}` **item fields** **policy\_name** `string` *required* **Policy name.** Application Auto Scaling policy name. Terraform/AWS require 1-255 characters and this name must be unique for the scalable target. The names cpu, memory, and request\_count are used by the built-in policies. * Pattern: `^.{1,255}$` — Use 1-255 characters. **target\_value** `number` *required* **Target value.** Target value for the custom metric. Choose a value appropriate for the CloudWatch metric, such as desired average queue depth per task. **custom\_metric** `object` *required* **Custom metric.** CloudWatch customized metric specification supported by this Terraform module: metric\_name, namespace, statistic, and optional dimensions map. Statistic must be Average, Minimum, Maximum, SampleCount, or Sum. * Default: `{"dimensions":{}}` **scale\_in\_cooldown** `number` **Scale-in cooldown seconds.** Seconds after a scale-in activity completes before another scale-in activity can start. * Default: `300` * Min: `0` **scale\_out\_cooldown** `number` **Scale-out cooldown seconds.** Seconds to wait for a previous scale-out activity to take effect. * Default: `300` * Min: `0` **scale\_in\_enabled** `boolean` **Scale in.** Allow this target tracking policy to remove running tasks automatically. * Default: `true` **request\_count\_target\_value** `number` **Requests per task target.** Target average number of load balancer requests per task per minute (ALBRequestCountPerTarget). Applies only with the Rolling deployment strategy, because blue/green, linear, and canary deployments move production traffic between target groups. Leave blank to disable request-count autoscaling. * Min: `1` * Shown when: `{"auto_scaling_enabled":true}` ### Environment variables **build\_environment\_variables** `object` **Build environment variables.** Only available during the build, not at runtime. Use environment variables or secrets for runtime values. **dockerfile\_environment\_variable\_injection\_enabled** `boolean` **Inject environment variables in Dockerfile.** Pass build environment variables into Dockerfile builds as build arguments. * Default: `false` * Shown when: `{"build_source":"dockerfile"}` **environment\_variables** `array` **Runtime environment variables.** Runtime environment variables passed to the app container. PORT is added automatically from the container port setting. **secrets** `array` **Runtime secrets.** Secrets injected into the ECS task at runtime, as an array of objects with `name` and `value_from` keys (snake\_case, not `valueFrom`). value\_from is an SSM Parameter Store or Secrets Manager ARN. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.