(aws-ecs): ECS Exec Support

As of March 16, ECS now supports remote execution similar to docker exec.

Use Case

As a user, I want the capability to execute commands against an AWS ECS Fargate / EC2 container (similar to docker exec) workloads managed by CDK.

Proposed Solution

CloudFormation’s AWS::ECS::Service resource currently supports the boolean property: EnableExecuteCommand

Expose this to the aws-ecs’s FargateService similar to enableEcsManagedTags

Other

• https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-exec.html
• https://aws.amazon.com/blogs/containers/new-using-amazon-ecs-exec-access-your-containers-fargate-ec2/
• https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html#cfn-ecs-service-enableexecutecommand

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[mbeacom]

@SoManyHs Yes, apologies for the delay. I can push this out shortly!

[SoManyHs]

We may also want to consider modifying the task role since “the task role will need to have IAM permissions to log the output to S3 and/or CloudWatch if the cluster is configured for these options. If these options are not configured then these IAM permissions are not required.”

See: “Configuring the task role with the proper IAM policy”