Deploying an Application on AWS ECS with ECR and Docker
🚀 Overview:
This project involves deploying an application using Amazon Elastic Container Service (ECS), Amazon Elastic Container Registry (ECR), and Docker. This combination allows for efficient containerization, storage, and orchestration of applications in the AWS cloud environment.
🔧 Problem Statement
The project goal is to implement a robust, scalable, and efficient deployment solution using AWS Elastic Container Service (ECS), Elastic Container Registry (ECR), and Docker. This solution should automate the deployment process, ensure environment consistency, improve resource utilization, enhance security, and provide better monitoring and scaling capabilities.
By successfully implementing this project, we expects to significantly reduce deployment times, minimize downtime, improve application performance, optimize resource usage, and ultimately deliver a better experience to their rapidly growing user base.
📌 Architecture Diagram
💽 Techonology Stack
The architecture consists of the following three tiers:
Private Repository : AWS ECR
Container: AWS ECS & Docker
Terminal: AWS CLI
Policies and User: AWS IAM
Virtual Machine: AWS EC2
🌟 Project Requirements
Before you get started, make sure you have the following prerequisites in place:
IAM User with access and secrets access keys .
AWS IAM credentials configured in your text editor. In this case we will use VSCODE.
A virtual machine EC2 with Docker install already
Dockerfile and Index.html written
📋 Table of Contents
I - IAM configuration
Step 1: Create IAM Policy for ECR Access
Step 2: Attach policy to IAM user
Step 3: Configure your AWS Credentials on a running Ubuntu EC2
II - Create an ECR Repository
Step 1: Navigate to Amazon ECR
Step 2: Create a new Repository
Step 3: Configure setting
Step 4: Repository created
III - Push Docker Image to ECR
Step 1: Push commands for my-ecr-repo
Step 2: Creation Image and push to repository
IV - Create ECS
Step 1: Navigate to Amazon ECS
Step 2: Create a new ESC cluster
Step 3: Create Task Definition
Step 4: Create a Container
Step 5: Create ECS Service
Step 6: Create a Container
V - Access the web page
Step 1: Navigate to Configuration
Step 2: Check the result
✨IAM CONFIGURATION
Here is the place to set up permission and authentication for our user to access the repository
Step 1: Create IAM Policy for ECR Access
First, create an IAM policy that allows necessary permissions for Amazon ECR.
Go to AWS console, search for IAM service. In IAM Dashboard, click on Policies and then click on Create policy
Click on JSON , and Then use the following JSON code for the IAM user policy to provide Amazon ECR permissions for creating repositories and pushing images.
Click on Next and enter the name for your policy. In this case we will call it AWS-ECR-Task_Policy.
Click on Create policy
Step 2: Attach policy to IAM user
This is where we attach the new policy to a user that was created before. Or feel free to create you own user.
Go to the IAM Management console, navigate to user, find the user. under Set permissions, select Attach policies directly and select the policy created
Click on Add permission
To perform this action as we said in the requirement you must have an Amazon Ubuntu EC2 running with Docker installed on it. Check my other project to see how to do that.
Configure AWS credentials using the aws configure command.
Provide your AWS Access Key ID, Secret Access Key, AWS Region, and output format as JSON
💼 Create an ECR Repository
Follow these steps to create an Elastic Container registry:
Step 1: Navigate to Amazon ECR
Use the AWS services search bar and search for ECR
Step 2: Create a new Repository
In the Amazon ECR console , click on Create
You will be prompt to a page where you will have to choose Public or private registry. For this project we will go with the private registry. then click Create repository
Step 3: Configure setting
In General setting give a repository name (my-ecr-repo) , the choose the image mutability. In Encryption setting stay with the standard AES-256.
Step 4: Repository created
The repository has been created successfully
💼 Push Docker image to ECR
Here we have to create the docker image and the push it to the ECR repository. To complete that we have first the Dockerfile and the index.html files created and save in the virtual machine.
Dockerfile
index.html
Step 1: Push commands for my-ecr-repo
To push go to the Amazon ECR, open the Repository name and click on View push commands
By following below steps, you can successfully push your Docker image to Amazon ECR and make it available for use in ECS
Run the following commands one by one.
Step 2: Creation Image and push to repository
Authenticate Docker to ECR
Build Docker Image
Tag image and push
List Images in ECR Repository:
Click on the refresh button to verify that the Docker image has been uploaded to the ECR repository .
📌 Create ECS
Step 1: Navigate to Amazon ECS
Go to the AWS Management Console and search for ECS
Step 2: Create a new ESC cluster
in the option, Enter name for your cluster put cluster1
Under the Infrastructure, choose "AWS Fargate". Click on Create
Cluster was created successfully
Step 3: Create Definition Task
Click on Create a new task definition
Under task definition family enter name for your task. Choose FARGATE launch type. For the operating system take Linux/x86_64.
Step 4: Create a container
Fill the option with
Name of container (web-server)
Image URL: Copy the URI from the Repository that we created earlier
Essential Container (Yes)
Port Mapping Container (Port 80), Port Name (httpd)
Then click create and the task will create
Step 5: Create ECS service
Here you have to Go back to the cluster we created. Scroll down and click Create under Services.
Under the Compute options menu. Select Capacity provider strategy. Select FARGATE as the capacity provider.
Under Deployment configuration, choose Task. In Task definition Select the created task definition, (i.e., ECR-httpd)
Under Networking, select your VPC and Subnets.
Click on Create new security group. Select HTTP and open to anywhere.
Click Create the task has been created successfully
✨Access the web page
Step 1: Navigate to Configuration
Return to the cluster1 open it , click on Tasks and click on the running task
Under Configuration, click on open address. Open the address in a web browser to access the HTTPD page.
Step 2: Check the result
🤝 Contributing
Your perspective is valuable! Whether you see potential for improvement or appreciate what's already here, your contributions are welcomed and appreciated. Thank you for considering joining us in making this project even better. Feel free to follow me for updates on this project and others, and to explore opportunities for collaboration. Together, we can create something amazing!
📄 License
This project is licensed under the JoebahoCloud License
