const service = new awsx.ecs.FargateService("service", {
  cluster: cluster.arn,
  name: config.appName + "-service",
  enableExecuteCommand: true,
  networkConfiguration: {
    subnets: privateSubnetIds,
    assignPublicIp: false,
    securityGroups: [ecsAppServiceSecurityGroup.id],
  },
  ...