shiichan

Amazon ECS Action Logs Make Every Deployment Step Visible!

Hi, I'm Shii-chan! Today I've got news that should resonate with anyone running Amazon ECS — a quiet but genuinely useful feature!

AWS What's New aws.amazon.com

What was announced?

According to the AWS What's New page, Amazon ECS has a new observability feature called Action Logs. It records detailed, timestamped events for the actions ECS takes behind the scenes during service deployments and ECS Managed Daemon updates. Each log entry includes the event name, log level (INFO / WARN / ERROR), the relevant resource ARNs, and a status reason.

The story so far

Until now, what ECS was actually doing behind a deployment or a daemon update was something of a black box. When something went wrong, you often had to contact AWS Support or manually piece together logs from multiple sources yourself.

What changes

With Action Logs, you can follow the state transitions of a service deployment or a Managed Daemon update yourself. That means troubleshooting without contacting Support or manually cross-referencing multiple data sources. You opt in at the cluster level, either from the ECS console or through the CloudWatch vended logs API, and you can choose to deliver logs to Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose.

On top of that, Amazon Q in the ECS console is integrated with Action Logs, automatically detecting deployment issues like circuit breaker rollbacks or unstable service revisions. It walks you through root cause analysis, resource-level comparisons, and step-by-step remediation, all without leaving the console.

Dive Deep

  • Log contents: event name, log level (INFO / WARN / ERROR), relevant resource ARNs, and a status reason
  • Enabling it: opt in per cluster, from the ECS console or the CloudWatch vended logs API
  • Delivery destinations: Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose
  • Pricing: no extra charge beyond standard CloudWatch Logs, S3, or Data Firehose ingestion and storage pricing

Wrap-up

  • Amazon ECS added Action Logs, which make deployments and Managed Daemon updates visible instead of a black box
  • Logs include the event name, log level, resource ARNs, and status reason
  • You opt in per cluster and can deliver to CloudWatch Logs, S3, or Kinesis Data Firehose
  • Amazon Q integration automatically detects deployment issues and walks you through root cause analysis and fixes, right in the console
  • If your team spends a lot of time troubleshooting ECS deployments, this update should make your life noticeably easier!