# Check the completed rollback target before relying on an ECS circuit breaker

> Automatic rollback requires an eligible prior deployment.

- Canonical URL: https://update.dsesecurity.com/updates/check-the-completed-rollback-target-before-relying-on-an-ecs-circuit-breaker/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-20T18:14:00+00:00
- Modified: 2026-10-20T18:34:29+00:00
- Last reviewed by DSE: 2026-10-20
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Automatic rollback requires an eligible prior deployment.

## Potentially affected

This applies to the supported ECS rolling-update deployment controller rather than every deployment strategy.

## DSE recommendation

DSE recommends identifying the known-good deployment and its artifact dependencies before a release.

## Article

Automatic rollback requires an eligible prior deployment.

## Source facts

The ECS deployment circuit breaker evaluates whether a rolling deployment reaches steady state. With rollback enabled, it selects the most recent deployment in COMPLETED state. If no eligible completed deployment exists, the deployment stalls without launching new tasks. AWS exposes rollout state, reasons and deployment events for investigation.

Source: [AWS Documentation](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-circuit-breaker.html).

## Applicability

This applies to the supported ECS rolling-update deployment controller rather than every deployment strategy.

## DSE recommendation

DSE recommends identifying the known-good deployment and its artifact dependencies before a release. Review container and load-balancer health checks so the circuit breaker evaluates meaningful readiness. Assign an owner to deployment-failure alerts and record the manual recovery route for a first deployment or missing rollback target. Preserve the expected task definition and rollback evidence. Do not describe the feature as unconditional recovery; include the completed-target requirement in the release checklist. Keep the rollback artifact and task definition identifiable in the release record, with a named person responsible for first-deployment recovery. Ask that person to explain the manual response when no completed target exists before accepting the automated rollback option.

## Verification

Proposed verification: use a disposable service with a completed deployment, introduce a controlled failing revision and observe rollout state and rollback events. Review behavior for an initial deployment separately. Confirm the expected healthy task definition returns before reporting a successful recovery test.

## Official reference

[AWS Documentation](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-circuit-breaker.html). Reviewed October 20, 2026.

## Primary reference

- Name: AWS Documentation
- Authority: docs.aws.amazon.com
- URL: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-circuit-breaker.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Check the completed rollback target before relying on an ECS circuit breaker,” DSE Security, https://update.dsesecurity.com/updates/check-the-completed-rollback-target-before-relying-on-an-ecs-circuit-breaker/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.