[connoromalleyatwork]

What does this change?

Update guardian cdk library to use provision the ECS Managed Instances instance role and profile. This is the first step to transitioning to ECS Managed Instance.

Have a look at the cdk pull request that adds the managed instances support: Support ECS managed instances capacity provider - #2971

How has this change been tested?

Deployed to CODE and tested the app to make sure all is running well.

[github-actions]

🚀 Image pushed to AWS ECR

Image digest: sha256:9778326ee94d56c26a0c42ffad8c7b62e8f976ad4b9d577c0fe50c552b0f56a6

🐛 Run the image locally

The following can be used to run the image locally:

# Refer to image using the immutable digest. Find alternatives below.
IMAGE_IDENTIFIER="@sha256:9778326ee94d56c26a0c42ffad8c7b62e8f976ad4b9d577c0fe50c552b0f56a6"

# Refer to image using branch tag
# IMAGE_IDENTIFIER=":branch-amiable-managed-instances"

# Refer to image using build tag
# IMAGE_IDENTIFIER=":build-1415"

# Set environment variables for the AWS CLI
AWS_PROFILE="<A_PROFILE_FROM_JANUS>"
AWS_DEFAULT_REGION="eu-west-1"

IMAGE_ACCOUNT_ID=$(aws ssm get-parameter --name /organisation/accounts/artifacts --query "Parameter.Value" --output text)
REGISTRY="${IMAGE_ACCOUNT_ID}.dkr.ecr.${AWS_DEFAULT_REGION}.amazonaws.com"
IMAGE="${REGISTRY}/guardian/amiable/amiable${IMAGE_IDENTIFIER}"

# Login to AWS ECR https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry_auth.html
aws ecr get-login-password | docker login --username AWS --password-stdin $REGISTRY

# Pull the image
docker pull $IMAGE

# Run the image. You'll likely need to set additional flags. See https://docs.docker.com/reference/cli/docker/container/run.
docker run $IMAGE

---

From guardian/actions-ecr.

[github-actions]

Deploy build 2422 of tools::amiable to CODE

All deployment options

• Deploy build 2422 of tools::amiable to CODE
• Deploy parts of build 2422 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.