ContainerServices Object
Relationships
graph LR
ContainerServices -->|"account"| Accounts
ContainerServices -->|"cluster"| ContainerClusters
ContainerServices -->|"task_definition"| ContainerTaskDefinitions
ContainerServices -->|"attached_rule_sets"| FirewallRuleSets
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
Whether tasks get a public IP address on their network interface. Null when the service does not use per-task networking (awsvpc), where the host's network decides.
The firewall rule sets (security groups) attached to the tasks' network interfaces (awsvpc networking).
The target's id.
Capacity pools in the service's capacity provider strategy, verbatim (on AWS ECS: FARGATE, FARGATE_SPOT or customer-named providers). Empty when the service uses a launch type.
The container cluster this object runs in.
The target's id.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
Where the tasks run, normalised. serverless: the provider runs the machines (AWS Fargate, Azure Container Apps consumption, GCP Cloud Run). customer_managed_servers: servers in the customer's account that the customer runs (on AWS ECS: EC2 container instances). provider_managed_servers: servers in the customer's account that the provider patches and scales (on AWS: ECS Managed Instances). external_servers: the customer's own servers outside the cloud (on AWS: ECS Anywhere). unknown: the service uses capacity providers whose kind is not read here (only FARGATE and FARGATE_SPOT are known to be serverless), or no launch type and no strategy (the cluster default applies) - see unreadable_fields.
serverlesscustomer_managed_serversprovider_managed_serversexternal_serversunknown
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
Number of tasks the service is meant to keep running.
Whether interactive exec into the running containers is turned on (on AWS: ECS Exec, enableExecuteCommand).
Load balancer target groups (ARNs) the service registers its tasks with.
The service name, verbatim.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Number of tasks in the pending state.
The serverless platform version, verbatim (AWS Fargate only).
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
The provider's own launch type, verbatim (on AWS ECS: EC2, FARGATE, EXTERNAL or MANAGED_INSTANCES). Null when the service uses a capacity provider strategy instead - see capacity_providers.
The provider's own state string, verbatim (on AWS ECS: ACTIVE, DRAINING or INACTIVE).
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
Number of tasks in the running state.
State, normalised. On AWS ECS: DRAINING (the service is being deleted) is deleting, INACTIVE is deleted. provider_status has the provider's value verbatim.
activedeletingdeletedunknown
Subnets the tasks are placed in (per-task networking, awsvpc).
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
The task definition revision the service runs. GET container_task_definitions with this id to read that exact revision.
The target's id.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.