[ecs-patterns] ApplicationLoadBalancedFargateService - how to add security group to Network Interface

[sjbthfc2]

Hi,

I am trying to create a Fargate ECS cluster with two Tasks. I want each Task to communicate over tcp to non-default ports. I am using the ApplicationLoadBalancedFargateService in C#, but I cannot see where to add a Security Group that allows inbound traffic to these ports. I can add one in the console after the stack has been deployed, but I want to include it in the CDK stack. I can see that the following group is successfully created:

            var secGroup = new SecurityGroup(this, "secgroup", 
             new SecurityGroupProps
            {
                Vpc = vpc,
                SecurityGroupName = "MySecurityGroup",
                Description = "Silo security port access"
            });
            secGroup.AddIngressRule(Peer.Ipv4("0.0.0.0/0"), Port.Tcp(11111), "Silo port access");
            secGroup.AddIngressRule(Peer.Ipv4("0.0.0.0/0"), Port.Tcp(30000), "Gateway port access");

but it does not get added to the ENI of the ECS Service. I have tried adding the group to the Service created as part of using ApplicationLoadBalancedFargateService via the Connections.AddSecurityGroup method.

How can I get the security group to be used for the ENIs created for the tasks?

Many thanks

[sjbthfc2]

Hi, has there been any development with this issue?

Thanks

[sjbthfc2]

HI, any update on guidance or resolution for this?

Thanks