public static Amazon.CDK.AWS.StepFunctions.Tasks.EcsRunTask CreateTask(Construct scope, Table presortTable) { var environmentCID = Amazon.CDK.AWS.SSM.StringParameter.ValueFromLookup(scope, Config.PARAMETER_STORE_AWS_ACCOUNTID_CICD); var repo = new Amazon.CDK.AWS.ECR.Repository(scope, "ECRRepo", new Amazon.CDK.AWS.ECR.RepositoryProps() { RemovalPolicy = RemovalPolicy.DESTROY, RepositoryName = Config.ECR_REPO_NAME }); repo.AddToResourcePolicy(new Amazon.CDK.AWS.IAM.PolicyStatement(new Amazon.CDK.AWS.IAM.PolicyStatementProps { Effect = Amazon.CDK.AWS.IAM.Effect.ALLOW, Actions = new string[] { "ecr:*" }, Principals = new Amazon.CDK.AWS.IAM.IPrincipal[] { new Amazon.CDK.AWS.IAM.ArnPrincipal("arn:aws:iam::" + environmentCID + ":root") } })); var taskDefinition = new FargateTaskDefinition(scope, "DownloadAccuzipFileTaskDefinition", new FargateTaskDefinitionProps() { Cpu = 4096, MemoryLimitMiB = 8192, }); var containerDefinition = taskDefinition.AddContainer(Config.ECR_REPO_NAME + "1", new ContainerDefinitionProps() { Cpu = 4096, MemoryLimitMiB = 8192, Image = ContainerImage.FromEcrRepository(repo), Logging = new AwsLogDriver(new AwsLogDriverProps() { StreamPrefix = "dmappresort" }) }); var policyStatement = new Amazon.CDK.AWS.IAM.PolicyStatement(); policyStatement.AddAllResources(); policyStatement.AddActions(new string[] { "dynamoDb:*", "ses:*", "s3:*" }); taskDefinition.AddToTaskRolePolicy(policyStatement); var cluster = CreateCluster(scope); var lstEnviron = new List <TaskEnvironmentVariable>(); //lstEnviron.Add(new TaskEnvironmentVariable //{ // Name = "accuzipFileS3key", // Value = JsonPath.StringAt("$.accuzipFileS3key") //}); //lstEnviron.Add(new TaskEnvironmentVariable //{ // Name = "beforeReduceFileS3Key", // Value = JsonPath.StringAt("$.beforeReduceFileS3Key") //}); //lstEnviron.Add(new TaskEnvironmentVariable //{ // Name = "bucketName", // Value = JsonPath.StringAt("$.bucketName") //}); //lstEnviron.Add(new TaskEnvironmentVariable //{ // Name = "apiKey", // Value = JsonPath.StringAt("$.apiKey") //}); lstEnviron.Add(new TaskEnvironmentVariable { Name = "REQUESTID", Value = JsonPath.StringAt("$.requestId") }); lstEnviron.Add(new TaskEnvironmentVariable { Name = "DYNAMO_TABLE", Value = presortTable.TableName }); return(new EcsRunTask(scope, "FileMergeFargate", new EcsRunTaskProps() { LaunchTarget = new EcsFargateLaunchTarget(), AssignPublicIp = true, IntegrationPattern = IntegrationPattern.RUN_JOB, Cluster = cluster, TaskDefinition = taskDefinition, ContainerOverrides = (new List <ContainerOverride> { new ContainerOverride { ContainerDefinition = containerDefinition, Environment = lstEnviron.ToArray() } }).ToArray() })); }