# AWS services used in ECS architecture
<a name="aws-services-in-this-solution"></a>


| AWS service | Description | 
| --- | --- | 
|  **Compute & Serverless**  |  | 
|  [AWS Lambda](https://aws.amazon.com/lambda/)  | Management API handlers, configuration redeployment triggers, and custom resources | 
|  [Amazon Rekognition](https://aws.amazon.com/rekognition/)  | Content-aware smart cropping (face, label, custom label, text, and logo detection) and content moderation (v8.1\+) | 
|  **API & Networking**  |  | 
|  [Amazon API Gateway](https://aws.amazon.com/api-gateway/)  | REST API for the management API (Admin UI CRUD operations on origins, mappings, and transformation policies) | 
|  [Amazon CloudFront](https://aws.amazon.com/cloudfront/)  | CDN for content delivery and caching | 
|  [Elastic Load Balancing](https://aws.amazon.com/elasticloadbalancing/)  | Application Load Balancer that distributes image transformation requests across ECS tasks | 
|  **Storage**  |  | 
|  [Amazon S3](https://aws.amazon.com/s3/)  | Source image storage, transformed image cache | 
|  **Database**  |  | 
|  [Amazon DynamoDB](https://aws.amazon.com/dynamodb/)  | Storing transformation policies, mappings, and origins; caching Amazon Rekognition detection results (a dedicated `RekognitionCacheTable` resource, v8.1\+) | 
|  **Authentication & Authorization**  |  | 
|  [Amazon Cognito](https://aws.amazon.com/cognito/)  | User authentication for admin UI | 
|  [AWS IAM](https://aws.amazon.com/iam/)  | Roles, policies, and permissions | 
|  **Monitoring & Logging**  |  | 
|  [Amazon CloudWatch](https://aws.amazon.com/cloudwatch/)  | Supporting service for metrics, dashboards, alarms, and log management | 
|  **Container Services (ECS Architecture)**  |  | 
|  [Amazon ECS](https://aws.amazon.com/ecs/)  | Container orchestration for image processor | 
|  [Amazon ECR](https://aws.amazon.com/ecr/)  | Container image registry | 
|  [Amazon EC2](https://aws.amazon.com/ec2/)  | VPC, subnets, security groups for ECS | 
|  **Automation & Events**  |  | 
|  [Amazon EventBridge](https://aws.amazon.com/eventbridge/)  | Event-driven automation | 
|  [AWS Application Auto Scaling](https://aws.amazon.com/application-auto-scaling/)  | ECS task auto-scaling | 
|  **Security & Encryption**  |  | 
|  [AWS KMS](https://aws.amazon.com/kms/)  | Encryption key management | 
|  [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/)  | Stores the secret used to derive the encryption key for the management API’s encrypted pagination tokens (v8.1\+) | 
|  **Deployment & Management**  |  | 
|  [AWS CloudFormation](https://aws.amazon.com/cloudformation/)  | Infrastructure as code | 
|  [AWS CDK](https://aws.amazon.com/cdk/)  | Infrastructure definition framework | 

**Important**  
 **Configuration Delay and Cached Images**   
Changes to origins, transformation policies, or mappings may take up to 5 minutes to propagate across all image processing tasks. During this period, some requests may still use the previous configuration. Configuration updates do not automatically refresh cached images. Cached images processed with previous settings will remain available until they expire or are manually invalidated.