CloudOps Orchestration Service:ACS-ECS-BulkyInstallLogAgent

Prerequisites

Before you begin, make sure that you have:

• Target ECS instances that are running and reachable

• Cloud Assistant installed and running on each target ECS instance (the template uses ACS::ECS::RunCommand to run scripts remotely)

• Internal network access from the ECS instances to the regional Object Storage Service (OSS) endpoint for downloading the Logtail installer

• A Resource Access Management (RAM) role with the required permissions, if you use the OOSAssumeRole parameter (see Required permissions)

How it works

The template performs the following steps:

1. Retrieve target instances -- Selects the ECS instances that match the targets filter by using the ACS::SelectTargets action. The template detects each instance's operating system type (Linux or Windows).

2. Run OS-specific commands -- Loops over each instance and runs the appropriate script:

   • Linux: Downloads logtail.sh from the internal OSS endpoint and runs it as a shell script (RunShellScript).

   • Windows: Downloads logtail_installer.zip from the internal OSS endpoint, extracts it, and runs logtail_installer.exe as a PowerShell script (RunPowerShellScript).

3. Return results -- Aggregates command output from all instances into the commandOutput output parameter.

Action modes

The action parameter determines the operation on each instance.

Input parameters

{
  "Mode": "Concurrency",
  "MaxErrors": 0,
  "Concurrency": 10
}

Output parameters

Required permissions

Attach the following policy to the RAM role specified in OOSAssumeRole, or to the RAM user or role that runs the template.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "ecs:DescribeInstances",
                "ecs:DescribeInvocationResults",
                "ecs:DescribeInvocations",
                "ecs:RunCommand"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "oos:GetApplicationGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

This policy grants the following access:

• ecs:DescribeInstances -- Query instance details to resolve the targets filter.

• ecs:RunCommand -- Run shell or PowerShell scripts on the target instances.

• ecs:DescribeInvocations and ecs:DescribeInvocationResults -- Monitor command status and retrieve output.

• oos:GetApplicationGroup -- Retrieve application group information when targets are specified by application group.

Cross-OS behavior

The template detects each instance's operating system and runs the corresponding installer script.

Troubleshooting

Template source

For the full YAML template, see ACS-ECS-BulkyInstallLogAgent.yml on GitHub.