Nectere ArchWork in progress

AWS App Runner

The AWS App Runner target is an early draft. It creates a service and destroys it. On the detail view only the log and Destroy work. Use the Azure and Google targets in the main guide for production.

01Limits

ECR images only. Images from GHCR, Docker Hub or anywhere else fail at service creation.
Private ECR needs an access role. Set ECR Access Role ARN to an IAM role with AWSAppRunnerServicePolicyForECRAccess that trusts build.apprunner.amazonaws.com. Without it the log warns No ECR access role ARN supplied — private ECR pulls will fail.
No updates or restarts. Destroy and redeploy to change the image.
No volumes.
Credential. AWS Access Keys.

02The wizard

Steps: App, Credential, Configure, Env Vars, Review.

Configure

Configure Deployment

AWS App Runner pulls from ECR only. If this app's image is not in ECR, the deployment will fail at create time. Push it to ECR or pick a different target.

Service Name

edge-proxy

Port

8080

Auto-detected from image inspection

Region

us-east-1 (N. Virginia)

ECR Access Role ARN (required for private ECR images)

arn:aws:iam::418272791002:role/AppRunnerECRAccessRole

An IAM role with the AWSAppRunnerServicePolicyForECRAccess policy, trusted by build.apprunner.amazonaws.com.

The log ends with Service URL: https://…awsapprunner.com and the URL shows on the detail view. Destroy Service finds the service by name and deletes it.

Log

[1:14:02 PM] --- Deploying to AWS App Runner ---

[1:14:02 PM] aws apprunner create-service --service-name edge-proxy

[1:14:09 PM] Service URL: https://x7k2q9m4ab.us-east-1.awsapprunner.com