According to the documentation of the FargateService the default SecurityGroup of the VPC is being used when no group is defined. However it seems to be implemented differently if you look at:
|
securityGroups = [new ec2.SecurityGroup(this, 'SecurityGroup', { vpc })]; |
A new SecurityGroup is created instead of using the default one of the VPC.