const service = new awsx.ecs.FargateService(n('caddy-service'), {
  cluster,
  taskDefinitionArgs: {
    container: {
      image: caddyImage,
      environment: getCaddyEnvironment(),
      portMappings: targetGroups,
    },
    volumes: [
      {
        name: 'certificates',
        efsVolumeConfiguration: {
          fileSystemId: certificatesEfs.efs.id,
          authorizationConfig: {
            accessPointId: certificatesEfs.ap.id,
            iam: 'ENABLED',
          },
          transitEncryption: 'ENABLED',
        },
      },
    ],
    executionRole: ecsExecutionRole,
    taskRole: createFargateTaskRole('caddy', [certificatesEfs.mountPolicy]),
  },
  waitForSteadyState: false,
});