> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/database-devops/3.0/troubleshooting-and-resources/troubleshooting-guide/troubleshooting/ecs-troubleshooting.md).

# ECS Troubleshooting

```
  <details>
```

Harness Database DevOps runner task not connecting to Harness platform when deployed on AWS ECS FargateCheck CloudWatch logs for the runner task. Verify the \`HARNESS\_DELEGATE\_TOKEN\` and \`HARNESS\_MANAGER\_ENDPOINT\` environment variables are correct in the task definition. Ensure the security group allows outbound HTTPS traffic to Harness Manager.

```
  <details>
```

Database DevOps build task on ECS fails with ResourceInitializationError during container startupVerify the task execution role has the \`AmazonECSTaskExecutionRolePolicy\` attached and includes permissions for \`logs:CreateLogGroup\`, \`logs:CreateLogStream\`, \`logs:PutLogEvents\`. Ensure the role can pull images from ECR if using private images.

```
  <details>
```

Database DevOps pipeline step fails with connection refused error to port 20001 on ECS FargateVerify the security group has a self-referencing inbound rule for TCP port 20001. Check that both the runner task and build tasks use the same security group. Port 20001 is required for lite-engine communication between the runner and step containers.

```
  <details>
```

Database DevOps pipeline on ECS Fargate exceeds the 10 container limit per taskSplit steps into multiple step groups. Each step group creates a separate ECS task, avoiding the 10-container limit per task. Avoid combining Apply and Rollback steps in the same step group.

```
  <details>
```

Rate exceeded errors in CloudWatch Logs API when running Database DevOps pipelines on ECSConfigure a shared log group in the pipeline task configuration to reduce \`CreateLogGroup\` calls. AWS CloudWatch has a 5 TPS limit for \`CreateLogGroup\`, which can be exceeded when creating many log groups concurrently.

```
  <details>
```

Unable to connect to Aurora database from Database DevOps pipeline running on ECS FargateVerify security group inbound rules allow traffic from the ECS task security group to the Aurora database. Confirm the ECS tasks are in the same VPC as Aurora or have proper routing configured. Test connectivity using \`telnet\` or \`nc\` from a test container.

```
  <details>
```

Database DevOps rollback step not executing as expected on ECS FargateSeparate rollback into its own step group. Ensure proper failure strategy configuration in the pipeline. Rollback steps configured within the same step group as Apply steps may not execute correctly due to ECS task lifecycle constraints.
