Prerequisites

Required Tools

Tool	Minimum Version	Purpose
Terraform	≥ 1.5	Infrastructure provisioning
AWS CLI	≥ 2.0	Authentication and resource verification

Verify your installed versions:

terraform version
aws --version

AWS Permissions

Your AWS credentials must have permissions to create and manage:

Service	Resources
Amazon ECS	Cluster, Express Gateway Service Express Gateway Service The aws_ecs_express_gateway_service Terraform resource that provisions an ECS service with managed ALB, auto scaling, and simplified configuration for HTTP/HTTPS web applications and APIs. , task definitions
VPC VPC Virtual Private Cloud — an isolated virtual network within AWS where resources are deployed.	VPC, subnets, internet gateway Internet Gateway A VPC component that enables communication between resources in a VPC and the internet. , route tables, security groups Security Group A virtual firewall for EC2 instances and other resources that controls inbound and outbound traffic.
IAM	Task Execution Role Task Execution Role An IAM role assumed by ecs-tasks.amazonaws.com that grants ECS permissions to pull container images and write CloudWatch logs. , Infrastructure Role Infrastructure Role An IAM role assumed by ecs.amazonaws.com that grants ECS Express Mode permissions to provision ALB, networking, and auto scaling resources. , Task Role Task Role An IAM role assumed by ecs-tasks.amazonaws.com that grants the running container application-level permissions (Bedrock access in this project).
Elastic Load Balancing	Application Load Balancer Shared ALB The Application Load Balancer shared by up to 25 Express services in the same VPC using Host header routing rules. (managed by Express Mode)

Tip

An AdministratorAccess policy works for testing. For production, scope permissions to ECS, EC2, IAM, and CloudWatch.

Bedrock Model Access

The demo uses Amazon Bedrock Bedrock
AWS fully managed service providing foundation models for generative AI applications. for image analysis via a foundation model Foundation Model
A pre-trained large language or multimodal model available through Amazon Bedrock. . Two conditions must be met:

Marketplace Agreement

1. Open the Amazon Bedrock console
2. Navigate to Model access
3. Request access to Anthropic Claude models
4. Wait for status to show Access granted

Caution

Model access is typically approved within minutes but can take up to 24 hours. Complete this before running terraform apply.

Regional Availability

Your deployment region must support the chosen model. Check the Bedrock model support by region documentation.

The demo uses an inference profile Inference Profile
A Bedrock configuration that specifies model parameters and routing for inference requests. to route requests to the correct endpoint.

terraform.tfvars

aws_region  = "ap-southeast-2"