get info for the azure credentials secret
az ad sp create-for-rbac --name "githubAction" --role contributor
--scopes /subscriptions//resourceGroups/
--sdk-auth
automation todo...
- push image to ECR, get image URI back
- start up postgres task, apply database seed files?? <- extract databse URL
- create/update task definition for ECS (fargate)
- create service
do I need to shutdown old service?