service (long-running, optional public URL, scale-to-zero), job (run-to-completion), and schedule (cron-for-code). Billed by the second; a stopped service costs ~nothing.
Create & manage
Lifecycle, runs & logs
Secrets
Interactive shell (ECS Exec / SSM)
ssh opens an interactive shell into a running container over ECS Exec — no port 22, no SSH keys, no inbound access. It requires the AWS session-manager-plugin installed locally, and the image must contain /bin/sh.
Governance
Creating a workload andexec/ssh are sensitive — depending on the user’s Account Kit they may require human approval (the command returns status: "pending_approval" and runs after naive approvals approve <id>). Pair compute with naive queue for a worker pipeline. Full guide: /docs/getting-started/compute.