Build S3 trigger [BuildAll]

deployments/buildspec/service.yml

@@ -14,5 +14,5 @@ phases:
       - docker push $REPO_URI:latest
       - docker push $REPO_URI:$TAG
       - printf '[{"name":"%s","imageUri":"%s"}]' $SERVICE $REPO_URI:$TAG > imagedefinitions.json
-      - zip $SERVICE.zip imagedefinitions.json
-      - aws s3 cp imagedefinitions.json s3://$ARTIFACT_BUCKET/imagedefinitions/$SERVICE.zip
+      - zip -r $SERVICE.zip imagedefinitions.json
+      - aws s3 cp $SERVICE.zip s3://$ARTIFACT_BUCKET/imagedefinitions/$SERVICE.zip

deployments/pipeline-new.yml

@@ -396,6 +396,16 @@ Resources:
                   - ecr:ListTagsForResource
                   - ecr:DescribeImageScanFindings
                 Resource: "*"
+              # Allow codepipeline to deploy to ECS
+              - Effect: Allow
+                Action:
+                  - ecs:DescribeServices
+                  - ecs:DescribeTaskDefinition
+                  - ecs:DescribeTasks
+                  - ecs:ListTasks
+                  - ecs:RegisterTaskDefinition
+                  - ecs:UpdateService
+                Resource: "*"
 
   # This role is passed by CodePipeline to CloudFormation to use
   # when setting up resources in the pipeline