Issue#16

[hikarunakatani]

In this task, I confirmed that

• Docker image can be properly pulled from ECR repository
• CloudWatch log group gets created automatically

[github-actions[bot]]

Plan Result

CI link

Plan: 0 to add, 2 to change, 0 to destroy.

• Update
  • aws_iam_role.ecs_task_exec
  • aws_s3_bucket_policy.bucket_policy

Change Result (Click me)

```hcl # data.aws_iam_policy_document.bucket_policy will be read during apply # (depends on a resource or a module with changes pending) <= data "aws_iam_policy_document" "bucket_policy" { + id = (known after apply) + json = (known after apply) + statement { + actions = [ + "s3:DeleteObject", + "s3:GetObject", + "s3:PutObject", ] + effect = "Allow" + resources = [ + "arn:aws:s3:::cifar10-mlops-bucket/*", ] + principals { + identifiers = [ + "arn:aws:iam::490755108457:role/ecs_task_exec", ] + type = "AWS" } } } # aws_iam_role.ecs_task_exec will be updated in-place ~ resource "aws_iam_role" "ecs_task_exec" { id = "ecs_task_exec" ~ managed_policy_arns = [ - "arn:aws:iam::490755108457:policy/s3-access-policy", # (1 unchanged element hidden) ] name = "ecs_task_exec" tags = {} # (8 unchanged attributes hidden) # (1 unchanged block hidden) } # aws_s3_bucket_policy.bucket_policy will be updated in-place ~ resource "aws_s3_bucket_policy" "bucket_policy" { id = "cifar10-mlops-bucket" ~ policy = jsonencode( { - Statement = [ - { - Action = [ - "s3:PutObject", - "s3:GetObject", - "s3:DeleteObject", ] - Effect = "Allow" - Principal = { - AWS = "arn:aws:iam::490755108457:role/ecs_task_exec" } - Resource = "arn:aws:s3:::cifar10-mlops-bucket/*" }, ] - Version = "2012-10-17" } ) -> (known after apply) # (1 unchanged attribute hidden) } Plan: 0 to add, 2 to change, 0 to destroy. ```