Merge pull request #221 from DecisionsDev/updateECS

Add disclaimer that ILMT doesn't support AWS S3 secured via SS3-KMS

Author: siasin

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2025-02-06T16:29:18Z",
+  "generated_at": "2025-03-14T10:15:47Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -1180,31 +1180,31 @@
         "hashed_secret": "f7a650098d23ab9e1348956a181ad78def09fff4",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 103,
+        "line_number": 105,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "1d064a26284fe7e4a9162b75bc4910c073b6f20c",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 122,
+        "line_number": 124,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "ee6d75b0e9dd89083901685b135e7221f66acffe",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 137,
+        "line_number": 139,
         "type": "Secret Keyword",
         "verified_result": null
       },
       {
         "hashed_secret": "e460a102a85c6b2ad4ba7d0d03f87a59748c2967",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 231,
+        "line_number": 236,
         "type": "Secret Keyword",
         "verified_result": null
       }

platform/ecs/README.md

@@ -43,6 +43,8 @@ To deploy ODM containers on AWS ECS Fargate from [docker-compose](docker-compose
    * Install [ECS Compose-x](https://github.com/compose-x/ecs_composex?tab=readme-ov-file#installation), preferably in a virtual environment.
    * Ensure that you have an existing internet-facing Application Elastic Load balancer based on a VPC with public subnets [setup](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-manage-subnets.html) on Amazon Web Services(AWS).
    * If you want to run ODM Decision services in HTTPS mode, you need to have an [ACM public certificate](https://console.aws.amazon.com/acm/home). 
+   * Ensure that AWS S3 bucket is not secured by AWS KMS keys (SSE-KMS). This is not supported by IBM licensing service.
+
 
 *Note*: The commands and tools have been tested on macOS.
 
@@ -145,6 +147,9 @@ Since the ECS tasks need to access to the secret from Secrets Manager service, y
 
 ### 2.4 Create S3 bucket and IAM policy for IBM licensing service
 
+> **Disclaimer** - 
+> Make sure that AWS S3 is not secured by AWS KMS keys (SSE-KMS) as it is not supported by IBM Licensing service.
+
 In this tutorial, we have included IBM Licensing service for tracking license usage of ODM that is deployed on AWS ECS Fargate.
 
 The following steps are needed by IBM Licensing service:
@@ -176,7 +181,7 @@ The following steps are needed by IBM Licensing service:
       - arn:aws:iam::<aws_account_id>:policy/<policy_allow_access_S3_bucket>
 ```
 
-For more information, see [Tracking license usage on AWS ECS Fargate](https://www.ibm.com/docs/en/cloud-paks/foundational-services/3.23?topic=platforms-tracking-license-usage-aws-ecs-fargate).
+For more information, see [Tracking license usage on AWS ECS Fargate](https://www.ibm.com/docs/en/cloud-paks/foundational-services/4.9?topic=service-tracking-license-usage-aws-ecs-fargate).
 
 ### 2.5 Add Outbound rule to Load balancer's security group