Hi, I'm trying to get information from a file inside a container which is hosted inside an ECS (Fargate Service). That information is generated at run time and is not predictable. I found 2 possible solutions : • Enabling remote exec, and retrieving the information without pulumi (since I didn't found a function to do that remote exec on ecs). But it's not great to enable such feature in a prod env, and also not a huge fan of doing the call outside pulumi logic. • Adding a side-car container which will read to value and get it to an s3/cloudwatch log. Kind of heavy, but should work ! Do some have better ideas, or already managed this kind of setup ?

What type of information do you need to retreive? If it's sensitive, can you expose it via http with a secure auth mechanism? I would personally shy away from executing a command on a remote container – rather disable shell/ssh access.

That's a public key for DKIM verification, so not really sensible information since I'm going to publish it to R53