open-liberty-ecs-demo

A reference implementation deploying an IBM **Open Liberty** (Jakarta EE, Java 21) service on **AWS ECS Fargate**, with app *and* infrastructure as code in one repo. Production-aligned and AWS Well-Architected: a multi-stage Docker build, private-subnet Fargate tasks behind an internet-facing ALB, and a GitLab CI pipeline that scans, builds, plans, gates on manual approval, then applies.

type readmestatus activeaws · ecs · fargate · terraform

Features

Multi-stage Docker build — Maven 3.9 + Temurin 21 builder; Open Liberty kernel-slim-java21 runtime; non-root 1001:0.
Modular Terraform — four modules: networking, ecr, alb, ecs.
Private networking — Fargate tasks in private subnets; internet-facing ALB with ingress locked to a configurable CIDR.
Secure ECR — KMS encryption, immutable tags, push-time vulnerability scanning, lifecycle policy.
MicroProfile Health — /health/live wired to both the ALB target group and the container health check.

Stack

Java 21 / Jakarta EE / Open Liberty · Docker · Terraform (networking/ecr/alb/ecs) · AWS ECS Fargate / ALB / ECR / VPC · GitLab CI.

Source

~/Terraform/Claude-AWS-Project/ (GitLab BobMck/open-liberty-ecs-demo). Architecture: Claude-AWS-Project/HLD. CI auth hardening: open-liberty-ecs-demo-oidc/README.

Compiled from wiki/projects/Claude-AWS-Project/README.md · git is the source of truth