Optional 60

• capacity_providersmap({...}), default nullMap of capacity provider definitions to create for the cluster
• cloudwatch_log_group_classstring, default nullSpecified the log class of the log group. Possible values are: STANDARD or INFREQUENT_ACCESS
• cloudwatch_log_group_kms_key_idstring, default nullIf a KMS Key ARN is set, this key will be used to encrypt the corresponding log group. Please be sure that the KMS Key has an appropriate key policy (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)
• cloudwatch_log_group_namestring, default nullCustom name of CloudWatch Log Group for ECS cluster
• cloudwatch_log_group_retention_in_daysnumber, default 90Number of days to retain log events
• cloudwatch_log_group_tagsmap(string), default {}A map of additional tags to add to the log group created
• cluster_capacity_providerslist(string), default []List of capacity provider names to associate with the ECS cluster. Note: any capacity providers created by this module will be automatically added
• cluster_configurationobject({...}), default {...}The execute command configuration for the cluster
• cluster_namestring, default ""Name of the cluster (up to 255 letters, numbers, hyphens, and underscores)
• cluster_service_connect_defaultsobject({...}), default nullConfigures a default Service Connect namespace
• cluster_settinglist({...}), default [...]List of configuration block(s) with cluster settings. For example, this can be used to enable CloudWatch Container Insights for a cluster
• cluster_tagsmap(string), default {}A map of additional tags to add to the cluster
• createbool, default trueDetermines whether resources will be created (affects all resources)
• create_cloudwatch_log_groupbool, default trueDetermines whether a log group is created by this module for the cluster logs. If not, AWS will automatically create one if logging is enabled
• create_infrastructure_iam_rolebool, default trueDetermines whether the ECS infrastructure IAM role should be created
• create_node_iam_instance_profilebool, default trueDetermines whether an IAM instance profile is created or to use an existing IAM instance profile
• create_security_groupbool, default trueDetermines if a security group is created
• create_task_exec_iam_rolebool, default falseDetermines whether the ECS task definition IAM role should be created
• create_task_exec_policybool, default trueDetermines whether the ECS task definition IAM policy should be created. This includes permissions included in AmazonECSTaskExecutionRolePolicy as well as access to secrets and SSM parameters
• default_capacity_provider_strategymap({...}), default nullMap of default capacity provider strategy definitions to use for the cluster
• disable_v7_default_name_descriptionbool, default false[DEPRECATED - will be removed in v8.0] Determines whether to disable the default postfix added to resource names and descriptions added in v7.0
• infrastructure_iam_role_descriptionstring, default nullDescription of the role
• infrastructure_iam_role_namestring, default nullName to use on IAM role created
• infrastructure_iam_role_override_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank sids will override statements with the same sid
• infrastructure_iam_role_pathstring, default nullIAM role path
• infrastructure_iam_role_permissions_boundarystring, default nullARN of the policy that is used to set the permissions boundary for the IAM role
• infrastructure_iam_role_source_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. Statements must have unique sids
• infrastructure_iam_role_statementsmap({...}), default nullA map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
• infrastructure_iam_role_tagsmap(string), default {}A map of additional tags to add to the IAM role created
• infrastructure_iam_role_use_name_prefixbool, default trueDetermines whether the IAM role name (iam_role_name) is used as a prefix
• node_iam_role_additional_policiesmap(string), default {}Additional policies to be added to the IAM role
• node_iam_role_descriptionstring, default "ECS Managed Instances node IAM role"Description of the role
• node_iam_role_namestring, default nullName to use on IAM role/instance profile created
• node_iam_role_override_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank sids will override statements with the same sid
• node_iam_role_pathstring, default nullIAM role/instance profile path
• node_iam_role_permissions_boundarystring, default nullARN of the policy that is used to set the permissions boundary for the IAM role
• node_iam_role_source_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. Statements must have unique sids
• node_iam_role_statementsmap({...}), default nullA map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
• node_iam_role_tagsmap(string), default {}A map of additional tags to add to the IAM role/instance profile created
• node_iam_role_use_name_prefixbool, default trueDetermines whether the IAM role/instance profile name (node_iam_role_name) is used as a prefix
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• security_group_descriptionstring, default nullDescription of the security group created
• security_group_egress_rulesmap({...}), default {...}Security group egress rules to add to the security group created
• security_group_ingress_rulesmap({...}), default {}Security group ingress rules to add to the security group created
• security_group_namestring, default nullName to use on security group created
• security_group_tagsmap(string), default {}A map of additional tags to add to the security group created
• security_group_use_name_prefixbool, default trueDetermines whether the security group name (security_group_name) is used as a prefix
• servicesmap({...}), default nullMap of service definitions to create
• tagsmap(string), default {}A map of tags to add to all resources
• task_exec_iam_role_descriptionstring, default nullDescription of the role
• task_exec_iam_role_namestring, default nullName to use on IAM role created
• task_exec_iam_role_pathstring, default nullIAM role path
• task_exec_iam_role_permissions_boundarystring, default nullARN of the policy that is used to set the permissions boundary for the IAM role
• task_exec_iam_role_policiesmap(string), default {}Map of IAM role policy ARNs to attach to the IAM role
• task_exec_iam_role_tagsmap(string), default {}A map of additional tags to add to the IAM role created
• task_exec_iam_role_use_name_prefixbool, default trueDetermines whether the IAM role name (task_exec_iam_role_name) is used as a prefix
• task_exec_iam_statementsmap({...}), default nullA map of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
• task_exec_secret_arnslist(string), default []List of SecretsManager secret ARNs the task execution role will be permitted to get/read
• task_exec_ssm_param_arnslist(string), default []List of SSM parameter ARNs the task execution role will be permitted to get/read
• vpc_idstring, default nullThe ID of the VPC where the security group will be created