version: 1
task_definition:
  task_execution_role: ecsExecutionRole
  services:
    redis:
      secrets:
        - value_from: /mysecrets/dbpassword
          name: DB_PASSWORD
        - value_from: /mysecrets/dbusername
          name: DB_USERNAME

$ ecs-cli compose create
INFO[0000] Using ECS task definition                     TaskDefinition="secrets:1"

{
  "executionRoleArn": "arn:aws:iam::111111111111:role/ecsExecutionRole",
  "containerDefinitions": [
    {
      "linuxParameters": {
        "capabilities": {
          "add": null,
          "drop": null
        },
      },
      "secrets": [
        {
          "valueFrom": "/mysecrets/dbpassword",
          "name": "DB_PASSWORD"
        },
        {
          "valueFrom": "/mysecrets/dbusername",
          "name": "DB_USERNAME"
        }
      ],
      "image": "redis:latest",
      "essential": true,
      "name": "redis"
    }
  ],
  "taskDefinitionArn": "arn:aws:ecs:us-west-2:144718711470:task-definition/secrets:1",
  "family": "secrets",
  "requiresAttributes": [
    {
      "targetId": null,
      "targetType": null,
      "value": null,
      "name": "com.amazonaws.ecs.capability.docker-remote-api.1.17"
    },
    {
      "targetId": null,
      "targetType": null,
      "value": null,
      "name": "ecs.capability.secrets.ssm.environment-variables"
    }
  ],
  "requiresCompatibilities": [
    "EC2"
  ],
  "revision": 1,
  "status": "ACTIVE",
}