Let's say ecs-service-def.jsonnet is like: { desiredCount: 1, networkConfiguration: { awsvpcConfiguration: { assignPublicIp: 'DISABLED', securityGroups: [ 'sg-xxx', ], subnets: [ 'subnet-yyy', ], }...