Skip to content

QIE AWS ECS Install Guide

This guide assumes that the installer has familiarity with AWS administration console and how to navigate the website. The installer needs to have a basic understanding of AWS Virtual Private Cloud (VPC), AWS IAM roles and security, and network security groups.

Each step below goes into detail on setting up the service. If your AWS environment already has a service set up that QIE can use, you are welcome to skip that step and move on to the next. Please note that even if you already have a service, there may be additional configuration changes needed for it to work correctly with QIE in the ECS environment.

Warning

Due to limitations in the AWS management console, the final step of this process that creates the ECS Service must be done using the AWS Command Line Interface (AWS CLI). All other steps can be done, and are shown, using the AWS management console.

Warning

For the ECS service, the Network Load Balancer cannot have more than five target groups attached to the service. This means that you can only have 5 ports routed to any ECS service. If you need to route more than 5 ports to the service, you must deploy multiple ECS services resulting in more QIE tasks running. If that is not something you want to do, then you may want to consider deploying in EKS instead. See https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html for more information about this limitation.

Installation steps

Work through these in order:

  1. Virtual Private Cloud (VPC)
  2. EC2 Security Group
  3. RDS Database
  4. Elastic File System (EFS)
  5. Add Files to EFS
  6. Secrets Manager
  7. IAM Role
  8. Load Balancer
  9. Elastic Container Services (ECS)

Once QIE is running, Open New Port covers exposing an additional channel port through the load balancer and security group.