Skip to content

feat(aws-containers): add Amazon ECS Gateway reference - #476

Merged
anasstahr merged 2 commits into
mainfrom
feat/aws-containers-ecs-gateway
Oct 22, 2026
Merged

anasstahr merged 2 commits into
mainfrom
feat/aws-containers-ecs-gateway

Conversation

@matthewgoodman13

Copy link
Copy Markdown
Contributor

Description

Amazon ECS Gateway launched on 2026-10-20. Without guidance, an agent asked to give several ECS services HTTPS endpoints builds a separate ALB, target group, and security group for each one. This PR adds a short reference so the agent picks ECS Gateway when it fits and reads the official docs before advising.

Changes, applied identically to skills/core-skills/aws-containers and plugins/aws-core/skills/aws-containers:

  • New references/ecs-gateway.md. It covers:
    • What ECS Gateway does: a platform team owns the gateway, and application teams opt services in with a gateway connector.
    • When to choose it over ECS Express Mode, or over your own NLB (TCP/UDP) or ALB.
    • Secure defaults: the PRIVATE access type filter for internal-only services, the HTTPS listener, AWS WAF, access logs encrypted with SSE-S3, security response headers set in the application, a scoped inbound security group, and scoped iam:PassRole.
    • A requirement to read and cite the ECS Gateway documentation. It copies no API parameters or procedures.
  • references/ecs.md: one routing line to the new reference.

SKILL.md frontmatter is unchanged, so skill selection is unaffected.

Validation (internal):

  • Skill-selection eval, 969 queries, 5 models (Opus 5.5/4.6/4.8, Sonnet 4.6, GPT-5.4): 98.5% to 99.4%, with 0 aws-containers misses.
  • Omega CR eval (Sonnet 5): 100% of aws-containers routing queries correct, 0 queries taken from other skills.

Type of Change

  • New plugin
  • New skill
  • Bug fix
  • Documentation update
  • CI/CD change
  • Other

Checklist

  • I have read the CONTRIBUTING guide
  • My changes pass python3 tools/validate.py
  • I have updated relevant documentation

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Add references/ecs-gateway.md and a routing line in references/ecs.md,
in both the core-skills and aws-core plugin trees. The reference says
what Amazon ECS Gateway does, when to choose it over ECS Express Mode or
a customer-managed load balancer, lists secure defaults, and requires
the agent to read the ECS Gateway docs before advising.
@matthewgoodman13
matthewgoodman13 requested a review from a team as a code owner October 21, 2026 03:21
@matthewgoodman13 matthewgoodman13 added the help wanted Extra attention is needed label Oct 21, 2026
@anasstahr
anasstahr added this pull request to the merge queue Oct 22, 2026
@anasstahr
anasstahr removed this pull request from the merge queue due to a manual request Oct 22, 2026
@anasstahr
anasstahr enabled auto-merge October 22, 2026 14:35
@anasstahr
anasstahr added this pull request to the merge queue Oct 22, 2026
Merged via the queue into main with commit 36bf7a8 Oct 22, 2026
9 checks passed
@anasstahr
anasstahr deleted the feat/aws-containers-ecs-gateway branch October 22, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

help wanted Extra attention is needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants