AWS Documentation » Amazon ECS » Developer Guide » Using the Amazon ECS Command Line Interface » Amazon ECS Command Line Reference » ecs-cli up

ecs-cli up

Creates the Amazon ECS cluster (if it does not already exist) and the AWS resources required to set up the cluster.

This command creates a new AWS CloudFormation stack called amazon-ecs-cli-setup-cluster_name. You can view the progress of the stack creation in the AWS Management Console.

Important

Some features described may only be available with the latest version of the Amazon ECS CLI. To obtain the latest version, see Installing the Amazon ECS CLI.

Syntax

ecs-cli up [--verbose] [--capability-iam | --instance-role instance-profile-name] [--keypair keypair_name] [--size n] [--azs availability_zone_1,availability_zone_2] [--security-group security_group_id[,security_group_id[,...]]] [--cidr ip_range] [--port port_number] [--subnets subnet_1,subnet_2] [--vpc vpc_id] [--extra-user-data string] [--instance-type instance_type] [--image-id ami_id] [--launch-type launch_type] [--no-associate-public-ip-address] [--force] [--cluster cluster_name] [--region region] [--empty] [--help]

Options

Name	Description
--verbose, --debug	Provides more verbose output for debugging purposes. Required: No
--capability-iam	Acknowledges that this command may create IAM resources. Note This parameter is only supported with tasks that use the EC2 launch type. This parameter is required if you do not specify and instance profile name with --instance-role. You cannot specify both options. Required: No
--keypair keypair_name	Specifies the name of an existing Amazon EC2 key pair to enable SSH access to the EC2 instances in your cluster. Note This parameter is only supported with tasks that use the EC2 launch type. For more information about creating a key pair, see Setting Up with Amazon EC2 in the Amazon EC2 User Guide for Linux Instances. Type: String Required: No
--size n	Specifies the number of instances to launch and register to the cluster. Note This parameter is only supported with tasks that use the EC2 launch type. Type: Integer Default: 1 Required: No
--azs availability_zone_1,availability_zone_2	Specifies a comma-separated list of two VPC Availability Zones in which to create subnets (these zones must have the available status). We recommend this option if you do not specify a VPC ID with the --vpc option. Warning Leaving this option blank can result in a failure to launch container instances when the randomly chosen zone is unavailable. Type: String Required: No
--security-group security_group_id[,security_group_id[,...]]	Specifies a comma-separated list of existing security groups to associate with your container instances. If you do not specify a security group here, then a new one is created. For more information, see Security Groups in the Amazon EC2 User Guide for Linux Instances. Required: No
--cidr ip_range	Specifies a CIDR/IP range for the security group to use for container instances in your cluster. Note This parameter is ignored if an existing security group is specified with the --security-group option. Type: CIDR/IP range Default: 0.0.0.0/0 Required: No
--port port_number	Specifies a port to open on the security group to use for container instances in your cluster. Note This parameter is ignored if an existing security group is specified with the --security-group option. Type: Integer Default: 80 Required: No
--subnets subnet_1,subnet_2	Specifies a comma-separated list of existing VPC subnet IDs in which to launch your container instances. Type: String Required: This option is required if you specify a VPC with the --vpc option.
--vpc vpc_id	Specifies the ID of an existing VPC in which to launch your container instances. If you specify a VPC ID, you must specify a list of existing subnets in that VPC with the --subnets option. If you do not specify a VPC ID, a new VPC is created with two subnets. Type: String Required: No
--extra-user-data string	Specifies additional user data for your container instance. Files can be shell scripts or cloud-init directives. They are packaged into a MIME multipart archive along with user data provided by the Amazon ECS CLI that directs instances to join your cluster. For more information, see Specifying User Data. Type: String Required: No
--instance-type instance_type	Specifies the EC2 instance type for your container instances. Note This parameter is only supported with tasks that use the EC2 launch type. For more information on EC2 instance types, see Amazon EC2 Instances. Type: String Default: t2.micro Required: No
--image-id ami_id	Specifies the Amazon EC2 AMI ID to use for your container instances. Note This parameter is only supported with tasks that use the EC2 launch type. Note If an AMI ID is not specified, the Amazon ECS CLI automatically retrieves the latest stable Amazon ECS-optimized AMI by querying the SSM Parameter Store API during the cluster resource creation process. This requires the user account that you are using to have the required SSM permissions. For more information, see Retrieving Amazon ECS-Optimized AMI Metadata. Type: String Default: The latest stable Amazon ECS–optimized AMI for the specified region. Required: No
--no-associate-public-ip-address	Do not assign public IP addresses to new instances in this VPC. Unless this option is specified, new instances in this VPC receive an automatically assigned public IP address. Note This parameter is only supported with tasks that use the EC2 launch type. Required: No
--force, -f	Forces the recreation of any existing resources that match your current configuration. This option is useful for cleaning up stale resources from previous failed attempts. Required: No
--instance-role, -f instance-profile-name	Specifies a custom IAM instance profile name for instances in your cluster. Note This parameter is only supported with tasks that use the EC2 launch type. This parameter is required if you do not specify the --capability-iam option. You cannot specify both options. Required: No
--launch-type launch_type	Specifies the launch type to use. Available options are FARGATE or EC2. For more information about launch types, see Amazon ECS Launch Types. This overrides the default launch type stored in your cluster configuration. Type: String Required: No
--empty, -e	Specifies that an ECS cluster is created with no resources. If other flags are also specified that would create resources, they are ignored and a warning is displayed. Required: No
--help, -h	Shows the help text for the specified command. Required: No

Specifying User Data

When launching tasks that use the EC2 launch type, the ECS CLI always creates container instances that include the following user data:

#!/bin/bash
echo ECS_CLUSTER={ clusterName } >> /etc/ecs/ecs.config

This user data directs the container instance to join your ECS cluster. You can optionally include additional user data using the --extra-user-data flag. The flag can be specified multiple times. For example, extra user data can be shell scripts or cloud-init directives. For more information, see Running Commands on Your Linux Instance at Launch in the Amazon EC2 User Guide for Linux Instances.

The Amazon ECS CLI takes the user data and packs it into a MIME multipart archive, which can be used by cloud-init on the container instance. The Amazon ECS CLI allows existing MIME multipart archives to be passed in with --extra-user-data. The Amazon ECS CLI unpacks the existing archive, and then repack it into the final archive (preserving all header and content type information). The following is an example:

ecs-cli up \  
  --capability-iam \  
  --extra-user-data my-shellscript \  
  --extra-user-data my-cloud-boot-hook \  
  --extra-user-data my-mime-multipart-archive \  
  --launch-type EC2

Examples

Creating a Cluster for Tasks Using the EC2 Launch Type

This example brings up a cluster of four c4.large instances and configures them to use the EC2 key pair called id_rsa.

ecs-cli up --keypair keypair_name --capability-iam --size 4 --instance-type c4.large --launch-type EC2

Output:

INFO[0001] Using recommended Amazon Linux AMI with ECS Agent 1.17.3 and Docker version 17.12.1-ce
INFO[0000] Created cluster                               cluster=ecs-cli-ec2-demo
INFO[0000] Waiting for your cluster resources to be created
INFO[0001] Cloudformation stack status                   stackStatus=CREATE_IN_PROGRESS
INFO[0061] Cloudformation stack status                   stackStatus=CREATE_IN_PROGRESS
INFO[0121] Cloudformation stack status                   stackStatus=CREATE_IN_PROGRESS
INFO[0181] Cloudformation stack status                   stackStatus=CREATE_IN_PROGRESS
Cluster creation succeeded.
VPC created: vpc-abcd1234
Security Group created: sg-abcd1234
Subnets created: subnet-abcd1234
Subnets created: subnet-dcba4321

Creating a Cluster for Tasks Using the Fargate Launch Type

This example brings up a cluster for your Fargate tasks and creates a new VPC with two subnets.

ecs-cli up --launch-type FARGATE

Output:

INFO[0001] Created cluster                               cluster=ecs-cli-fargate-demo region=us-west-2
INFO[0003] Waiting for your cluster resources to be created... 
INFO[0003] Cloudformation stack status                   stackStatus="CREATE_IN_PROGRESS"
INFO[0066] Waiting for your cluster resources to be created... 
INFO[0066] Cloudformation stack status                   stackStatus="CREATE_IN_PROGRESS"
VPC created: vpc-abcd1234
Subnets created: subnet-abcd1234
Subnets created: subnet-dcba4321
Cluster creation succeeded.

Creating an Empty Cluster

This example brings up an empty cluster named ecs-cli-empty-demo with no resources.

ecs-cli up --empty --cluster ecs-cli-empty-demo

Output:

INFO[0000] Created cluster                               cluster=ecs-cli-empty-demo region=us-east-1
Cluster creation succeeded.