# Deploy ECS Cluster and Service

**URL:** <https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281>\
**Category:** CrewAI Community Support\
**Tags:** crewai\
**Created:** [March 1, 2025, 9:16am UTC](https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281 "2025-03-01T09:16:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sen](https://sea1.discourse-cdn.com/flex025/user_avatar/community.crewai.com/sen/32/2827_2.png) [@Sen](https://community.crewai.com/u/Sen)\
**Post date:** [March 1, 2025, 9:16am UTC](https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281/1 "2025-03-01T09:16:01Z")

</div>

Hello, I get this message error every time I want to create a crew from crewai entreprise : **Error:**  
Ansible playbook failed: PLAY [Deploy ECS Cluster and Service] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* TASK [Debug variables] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ok: [localhost] =\> { “msg”: [“vpc\_id: vpc-0a9bef58bf9de5cf3”] } TASK [Ensure VPC Exists] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* skipping: [localhost] TASK [Get available subnets] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ok: [localhost] TASK [Select a subnet if available] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ok: [localhost] TASK [Get VPC CIDR] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* skipping: [localhost] TASK [Calculate new subnet CIDR] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* skipping: [localhost] TASK [Create new subnet] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* skipping: [localhost] TASK [Set selected subnet to new subnet] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* skipping: [localhost] TASK [Ensure Security Group Exists for ALB] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ansible\_collections.amazon.aws.plugins.module\_utils.ec2.AnsibleEC2Error: Failed to create security group: An error occurred (SecurityGroupLimitExceeded) when calling the CreateSecurityGroup operation: The maximum number of security groups has been reached. fatal: [localhost]: FAILED! =\> {“boto3\_version”: “1.35.90”, “botocore\_version”: “1.35.90”, “changed”: false, “msg”: “Unable to create security group: Failed to create security group”} PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* localhost : ok=3 changed=0 unreachable=0 failed=1 skipped=5 rescued=0 ignored=0 [WARNING]: Unable to parse /app/localhost as an inventory source [WARNING]: No inventory was parsed, only implicit localhost is available [WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match ‘all’ (Exit code: 2)

I did’nt find any solution

---

<div class="post-metadata">

**Author:** ![Sen](https://sea1.discourse-cdn.com/flex025/user_avatar/community.crewai.com/sen/32/2827_2.png) [@Sen](https://community.crewai.com/u/Sen)\
**Post date:** [March 1, 2025, 9:18am UTC](https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281/2 "2025-03-01T09:18:55Z")

</div>

**SecurityGroupLimitExceeded** – _The maximum number of security groups has been reached._

For this point I think I cannot do anything from my side ☹

---

<div class="post-metadata">

**Author:** ![Sen](https://sea1.discourse-cdn.com/flex025/user_avatar/community.crewai.com/sen/32/2827_2.png) [@Sen](https://community.crewai.com/u/Sen)\
**Post date:** [March 3, 2025, 4:47pm UTC](https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281/3 "2025-03-03T16:47:33Z")

</div>

Update for those who have the same problem, it’s coming from their side, the Support is currently trying to solve the problem. I’ll update once there are changes.

---

<div class="post-metadata">

**Author:** ![Saunders456](https://sea1.discourse-cdn.com/flex025/user_avatar/community.crewai.com/saunders456/32/4515_2.png) [@Saunders456](https://community.crewai.com/u/Saunders456)\
**Post date:** [May 29, 2026, 7:59pm UTC](https://community.crewai.com/t/deploy-ecs-cluster-and-service/4281/4 "2026-05-29T19:59:03Z")

</div>

That `SecurityGroupLimitExceeded` error means your AWS account has hit the default limit of security groups per VPC (usually 500). You’ll need to either delete unused security groups or request a limit increase from AWS Support before retrying.

For the CrewAI Enterprise deployment, also double-check that your ECS service role has proper permissions. If the issue persists, try running the playbook in a fresh VPC.

On a side note, if you’re managing infrastructure for client projects and need a solid roofing reference for any physical site deployments, [visit here](https://veteranroofingsystems.com/), I’ve been genuinely impressed by what they offer in terms of system reliability and thoughtful design. Helped a few colleagues avoid major structural headaches.

Back to your error: `aws service-quotas request-increase --service-code ec2 --quota-code L-12345678 --desired-value 600` should get you started.