How do I resolve the managed termination protection setting for the capacity provider error in Amazon ECS?

Resolution

When you create a cluster capacity provider in Amazon ECS, you might get the following error:

"The managed termination protection setting for the capacity provider is invalid. To enable managed termination protection for a capacity provider, the Auto Scaling group must have instance protection from scale in enabled."

To resolve the error, turn on scale-in protection on your Auto Scaling group. You can use either the Amazon Elastic Compute Cloud (Amazon EC2) console or the AWS Command Line Interface (AWS CLI) to turn on scale-in protection.

Note: If you receive errors when you run AWS CLI commands, then see Troubleshoot AWS CLI errors. Also, make sure that you're using the most recent AWS CLI version.

Amazon EC2 console

Complete the following steps:

1. Open the Amazon EC2 console.
2. In the navigation pane, choose Auto Scaling Groups, and then select your Auto Scaling group.
3. On the Details tab, under Advanced configurations, choose Edit.
4. Under Instance scale-in protection, select Enable instance scale-in protection.
5. Choose Update.

AWS CLI

To verify if scale-in protection is turned on for the Auto Scaling group, run the describe-auto-scaling-groups command:

aws autoscaling describe-auto-scaling-groups \
    --auto-scaling-group-names <YourAutoScalingGroupName> \
    --region RegionID \
    --query 'AutoScalingGroups[*].{AutoScalingGroupName:AutoScalingGroupName,NewInstancesProtectedFromScaleIn:NewInstancesProtectedFromScaleIn}' \
    --output table 

The output looks similar to the following:

------------------------------------------------------------------------------
|                  DescribeAutoScalingGroups                                 |
+---------------------------------------+------------------------------------+
| AutoScalingGroupName                  | NewInstancesProtectedFromScaleIn   |
+---------------------------------------+------------------------------------+
| <YourAutoScalingGroupName>            |  False                             |
+-----------------------+----------------------------------------------------+

To use the AWS CLI to turn on scale-in protection for the Auto Scaling group, run the update-auto-scaling-group command:

aws autoscaling update-auto-scaling-group \    
    --region RegionID \
    --auto-scaling-group-name YourAutoScalingGroupName \
    --new-instances-protected-from-scale-in

Note: Replace RegionID with your AWS Region. Replace YourAutoScalingGroupName with the name of your Auto Scaling group.

Troubleshooting

If you continue to have this error, then update your existing ECS instances. Some of your instances launched by the Auto Scaling group might not have scale-in protection.

Use the EC2 console or the AWS CLI to apply scale-in protection to the remaining instances:

Amazon EC2 console

Complete the following steps:

1. Open the Amazon EC2 console, and then choose Auto Scaling Groups from the navigation pane.
2. Select your Auto Scaling group, and then choose the Instances tab.
3. From the Instance ID column, select the instances to apply scale-in protection to.
4. On the Instance management tab, choose Actions, Set scale-in protection.
5. Use the console to recreate a capacity provider for Amazon ECS.

AWS CLI

Complete the following steps:

1. To list instances from your Auto Scaling group that don't have scale-in protection turned on, use the query feature to run the following command:

   aws autoscaling describe-auto-scaling-groups \    
       --region RegionID \
       --auto-scaling-group-names yourAutoScalingGroupName \
       --query 'AutoScalingGroups[].Instances[?ProtectedFromScaleIn==`true`].{Id:InstanceId}' \
       --output text

   Note: Replace RegionID with your Region. Replace yourAutoScalingGroupName with the name of your Auto Scaling group.
2. To turn on scale-in protection for the specified instances in your Auto Scaling group, run the following command:

   aws autoscaling set-instance-protection \    
       --region RegionID \
       --instance-ids yourInstanceID \
       --auto-scaling-group-name yourAutoScalingGroupName \
       --protected-from-scale-in

   Note: Replace RegionID with your Region. Replace yourInstanceID with your instance ID. Replace yourAutoScalingGroupName with the name of your Auto Scaling group.
3. Use the AWS CLI to recreate a capacity provider for Amazon ECS. For an example, see To create a capacity provider.

Related information

Automatically manage Amazon ECS capacity with cluster auto scaling