JA EN
shiichan

Amazon ECS Adds VPC Lattice Support for Blue/Green, Linear, and Canary Deployments

AWS What's New ★★★★ View Markdown
#aws#devops#infrastructure

Hi, it's Shii-chan!

AWS What's New aws.amazon.com

ECS services that use VPC Lattice can now shift traffic gradually during deployments!

What was announced?

AWS What's New announced that Amazon ECS now supports built-in blue/green, linear, and canary deployment strategies for ECS services using Amazon VPC Lattice.

The story so far

The announcement doesn't describe the earlier approach. What it says is that applications using VPC Lattice for service-to-service communication across VPCs and AWS accounts can now use managed traffic shifting natively from Amazon ECS.

What changes

You choose how quickly traffic moves based on your confidence in each release:

  • Blue/green: all at once
  • Linear: in equal increments
  • Canary: starting with a small percentage

You can also validate new versions with test traffic before shifting production traffic.

Dive Deep

Validation and approval

Deployment lifecycle hooks let you run custom validation steps or manual approvals, including Lambda and pause hooks.

Automatic rollback

  • Amazon CloudWatch alarms and the Amazon ECS deployment circuit breaker can roll back automatically when issues are detected
  • Bake time keeps the previous version ready for a quick rollback without downtime

How to set it up

In the ECS service configuration, select:

  • Your VPC Lattice target groups
  • The listener rule
  • Your preferred deployment strategy

You can do this with the AWS Management Console, AWS CLI, AWS SDKs, or Infrastructure-as-Code tools. It works for both new and existing ECS services in all AWS Regions where VPC Lattice is available.

Wrap-up

  • Built-in blue/green, linear, and canary for ECS services using VPC Lattice
  • Lambda and pause lifecycle hooks for validation and manual approval
  • CloudWatch alarms and the circuit breaker enable automatic rollback, and bake time speeds recovery
  • Works for new and existing services in all Regions where VPC Lattice is available

This one is for teams running microservices on VPC Lattice who want safer releases built in!

Related posts