aws-cloudformation - 不允许使用无关 key [HealthCheck]

Question

我有点陷入这个奇怪的错误。我正在使用 CloudFormation 脚本部署 ECS 任务 (Fargate)，它可以正常工作并成功部署该任务。但是当设置了 HealthCheck 属性时 Cloudformation 会回复

资源处理程序返回消息:“模型验证失败(#:不允许使用无关 key [HealthCheck])”(RequestToken:xxxxxxx-xxx-xxxx-xxxx-xxxxxxxxxxxx，HandlerErrorCode:InvalidRequest)

我的任务定义是:

  TaskDefinition:
    Type: AWS::ECS::TaskDefinition
    Properties:
      Family: !Sub ${ServiceName}-${EnvironmentName}
      Cpu: !Ref 'ContainerCpu'
      Memory: !Ref 'ContainerMemory'
      NetworkMode: awsvpc
      RequiresCompatibilities:
        - FARGATE
      ExecutionRoleArn: arn:aws:iam::xxxxxxxx:role/some-iam-role
      HealthCheck:
        Command:
          - [ CMD-SHELL,./compose/healthcheck.sh || exit 1 ]
        Interval: 10
        Retries: 5
        StartPeriod: 30
        Timeout: 5
      TaskRoleArn:
        Fn::If:
          - 'HasCustomRole'
          - !Ref 'Role'
          - !Ref "AWS::NoValue"
      ContainerDefinitions:
        - Name: !Ref 'ServiceName'
          Cpu: !Ref 'ContainerCpu'
          Memory: !Ref 'ContainerMemory'
          Image: !Ref 'ImageUrl'
          PortMappings:
            - ContainerPort: !Ref 'ContainerPort'
          LogConfiguration:
            LogDriver: 'awslogs'
            Options:
              awslogs-group: !Sub ${ServiceName}-service-${EnvironmentName}
              awslogs-region: !Ref 'AWS::Region'
              awslogs-stream-prefix: !Ref 'ServiceName'
          Environment:
            - <some other environment that work ok>

Answer 1

HealthCheck是 AWS::ECS::TaskDefinition.ContainerDefinition 的子属性，不是 AWS::ECS::TaskDefinition 的顶级属性