如何使AWS ECS任务定义使EC2实例可公开访问?

下面是我对ECS的AWS任务定义。

我需要这个任务的每个EC2实例都能让3026端口向全世界公开。我如何修改这个JSON来做到这一点?

目前,在服务运行此任务后,我手动查找EC2实例,然后手动添加一个安全组,允许从该端口上的0.0.0.0/0进入。

我真的不想再这样做了。

{
    "family": "myproj",
    "requiresCompatibilities": [
        "EC2"
    ],
    "containerDefinitions": [
        {
            "memory": 500,
            "memoryReservation": 350,
            "name": "myproj",
            "image": "blah.dkr.ecr.us-east-1.amazonaws.com/myproj:latest",
            "essential": true,
            "portMappings": [
                {
                    "hostPort": 3026,
                    "containerPort": 8000,
                    "protocol": "tcp"
                }
            ],
            "entryPoint": [
                "./entrypoint_deployment.sh"
            ],
            "environment" : [
                { "name" : "DB_HOST", "value" : "blah.blah.us-east-1.rds.amazonaws.com" }
            ],
            "logConfiguration": {
                "logDriver": "awslogs",
                "options": {
                    "awslogs-group": "/ecs/myproj",
                    "awslogs-region": "us-east-1",
                    "awslogs-stream-prefix": "ecs"
                }
            }

        }
    ]
}