Had to add ssh permission to sg attached to fargate to ssh from bastion server. neither in instructions nor added when sg created by CF.

Edit the smdemo-others inline policy to add the following permissions

• CompleteLayerUpload
• InitiateLayerUpload
• PutImage
• UploadLayerPart

RDS MySQL database passwords can contain as a valid character, so Secrets Manager includes the char as an option when executing the password rotation.

If by random chance a ` char is added to the database password, then ecs.sh (running within the Fargate task) will fail with a Bash syntax error. As a result the TASKDEF_SECRET environment varibale is not set and the user is unable to connect to the database via mysql.newway.sh

In theory it should be possible to escape the backtick character when it is being handled in ecs.sh

When trying to deploy the cfn template, the bastion host does not deploy, causing the stack to rollback. The error is "Failed to receive 1 resource signal(s) within the specified duration"

Switching to Fargate platform version 1.3.0 allows the workshop to function as advertised along with the other fixes mentioned in the other github issues.

Overall changes to this workshop will need to be made in order for 1.4.0 to work, but I wasn't able to determine exactly what after banging my head on it for while.