World map

 

BM

World A4: Containers in the Cloud

Fargate: no servers to look after

You will learn: to run ECS tasks on Fargate, pick the smallest size, and guard each task.

Checked with AWS 2026-11 on 1 Nov 2026

The problem

ECS needs computers to run your tasks. You could rent EC2 servers, patch them and resize them. Is there a lazier way?

Watch

Fargate: Containers with no servers to look after. The mall gives you a counter; you pay for its CPU and memory while it runs. runs each task with no server for you to look after. Some jobs stay yours. Sort them.

Drag a card into a box. Or tap the card, then tap the box.

      Try it

      Start one task on Fargate, the smallest size, in your public row. Build the command.

      Tap the pieces in the right order.

      …

      Predict

      Your task uses 0.25 vCPU and 0.5 GB. What does Fargate bill you for?

      Check

      Each Fargate task gets its own door guard. For your test, only your laptop may visit on port 80.

      Set the door guard's rules. Only the right visitors get in.

      Visitors

      • Your laptopshould get inTCP 80 from 203.0.113.9Its replies go back to ports 32768–61000.
      • Strangerkeep outTCP 80 from 192.0.2.77Its replies go back to ports 32768–61000.
      • Stranger (SSH)keep outTCP 22 from 192.0.2.77Its replies go back to ports 32768–61000.

      Unit door · security group (the server)

      Allow rules only. It remembers who came in, so replies always go out.

      In

      No In rules yet: nothing gets in.

      Out: all traffic (a new group starts this way).

      Check

      Good Fargate habits, or risky? Swipe right for good.

      Swipe right for good, left for needs work. Or use the buttons.

      1 / 4

      Start with 0.25 vCPU and 0.5 GB

      You did it!

      You can now run a small task on Fargate, behind its own guard.

      Go deeper (optional)

      Each Fargate task gets its own private IP, like a pod in Kubernetes World K3. To pull from a private ECR shelf, the task needs a task execution role. That role holds the pull keys.