Specify port mapping for container in ECS

Here is how to to deploy your container on AWS ECS using Fargate and allow external clients to access your service securely over HTTPS:

1. Task definition: In your task definition, set the containerPort to 8080, as this is the port your service is listening on inside the container. You don't need to specify a hostPort when using Fargate, as it will automatically assign an available port on the host. Here's an example container definition:

{
  "name": "my-container",
  "image": "my-repository:latest",
  "portMappings": [
    {
      "containerPort": 8080,
      "protocol": "tcp"
    }
  ],
  "essential": true
}

2. Load balancer: Create an Application Load Balancer (ALB) to handle incoming HTTPS traffic and forward it to your container instances. You'll need to configure a listener on the ALB to listen for HTTPS traffic on port 443. Make sure to attach an SSL certificate to the listener, either by importing your own or using one provided by AWS Certificate Manager (ACM).

3. Target group: Create a target group with the target type set to ip and the protocol set to HTTP. Specify the port as 8080. The ALB will forward incoming HTTPS traffic to this target group, which will then route it to the appropriate container instances.

4. Service security group: Create a security group for your ECS service that allows inbound traffic on the assigned hostPort from the ALB's security group. This will ensure that only traffic from the ALB can reach your container instances.

5. Load balancer security group: Update the security group associated with your ALB to allow inbound traffic on port 443 (HTTPS) from the internet or specific IP addresses, depending on your requirements.

6. ECS service: When creating or updating your ECS service, configure it to use the Fargate launch type and associate it with the ALB and target group created earlier. In the networkConfiguration section, specify the subnets and security group you created for your service.

With this setup, external clients can access your service using HTTPS via the ALB, which will forward the traffic to your container instances running on Fargate. The container instances will communicate with the ALB over HTTP on port 8080.

Let me know if you need further help.