AWS Fargate task fails ELB health checks

You did not include the actual Load Balancer in your template. Please include that, for a full answer.

Your problem is most likely that your Load Balancer - which most likely has a private IP in your subnets and communicates with that - is not allowed to communicate with your ECS instances, since they allow only traffic from 138.106.0.0/16.