AWS ECS provisioned with terraform fails with access to SecretsManager

I've run the https://github.com/1Password/scim-examples for deployment to AWS ECS Fargate and the provisioning went fine.

When the ECS service/task runs, it continually fails with: [redactions as appropriate]


ResourceInitializationError:
unable to pull secrets or registry auth:
execution resource retrieval failed:
unable to retrieve secret from asm:
service call has been retried 5 time(s):
failed to fetch secret arn:aws:secretsmanager:us-east-1:00000000000:secret:op-scim-bridge000000000000000000-xxxxxx from secrets manager:
RequestCanceled: request context canceled caused by: context deadline exceeded.
Please check your task network configuration.


• The IAM role is present and applied to the ECS deploy
• Tried with both default secretsmanager endpoint and a VPC Endpoint attachment
• Subnet is public with gateway, routing to internet or internal VPC Endpoint.
• a linux host on same subnet can curl the sm endpoint just fine.
• Secret is present in SM.
• SCIM Bridge version is 2.8.1

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided