aws-cdk-lib.aws_ecs.ServiceConnectTlsConfiguration

ServiceConnectTlsConfiguration Struct

TLS configuration for Service Connect service.

Source

aws-ecs/lib/base/base-service.ts

Type last changed

v2.224.0 · 13 Nov 2025

Example

declare const cluster: ecs.Cluster;
declare const taskDefinition: ecs.TaskDefinition;
declare const kmsKey: kms.IKey;
declare const role: iam.IRole;

const service = new ecs.FargateService(this, 'FargateService', {
  cluster,
  taskDefinition,
  serviceConnectConfiguration: {
    services: [
      {
        tls: {
          role,
          kmsKey,
          awsPcaAuthorityArn: 'arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/123456789012',
        },
        portMappingName: 'api',
      },
    ],
    namespace: 'sample namespace',
  },
});

Properties

awsPcaAuthorityArnstringaws_pca_authority_arnstrawsPcaAuthorityArnStringAwsPcaAuthorityArnstringAwsPcaAuthorityArn*string= none#

The ARN of the certificate root authority that secures your service.

kmsKeyIKeyRefkms_keyIKeyRefkmsKeyIKeyRefKmsKeyIKeyRefKmsKeyIKeyRef= none#

The KMS key used for encryption and decryption.

roleIRoleroleIRoleroleIRoleRoleIRoleRoleIRole= none#

The IAM role that's associated with the Service Connect TLS.