ECS Operation Review

This skill performs a structured, evidence-based operational-excellence assessment of a live Amazon ECS estate — clusters, capacity providers, services, task definitions, and their supporting AWS resources — and produces a rated report (GREEN / AMBER / RED / UNKNOWN / N/A) with prioritized, cited recommendations.

It is the umbrella Day-2 audit that walks the major domains of the Amazon ECS Best Practices Guide (ecs-best-practices.html). It is evaluative (it grades what exists), not generative — it does not design or build new environments, and it defers to the deep ECS skills for remediation depth rather than duplicating them (see "Defers to deep skills").

This skill is for Amazon ECS only. Skip it for EKS / Kubernetes estates — use eks-operation-review instead.

Scope & limitations (known blind spots)

This review is deliberately bounded. It does not currently assess, and should state as out-of-scope in the report:

• Scheduled and standalone tasks — the audit enumerates workloads via list-services; EventBridge-scheduled tasks and one-off run-task workloads are not examined.
• ECS Express Mode services — their ALB, security groups, and deployment config are auto-managed by AWS, so checks 2.2 / 4.x / 5.2 would mis-rate them. Mark N/A.
• Windows and ECS Anywhere (EXTERNAL) workloads — several container-hardening and runtime-monitoring checks (3.x, 7.3, 7.4) assume Linux on Fargate/EC2 and would false-RED Windows or external tasks. Note their presence and mark the affected items N/A.
• API throttling on large estates — when iterating over many services/task definitions, expect ECS API throttling; paginate and back off (see the pagination note in references/operational-processes.md).

State any of these that apply to the estate explicitly in the report's Scope block rather than silently omitting them.