(aws-ecs-patterns): ECS Exec Support

Add ECS Exec Support to the higher level constructs in ecs-patterns

Use Case

As a user, I want to set the flag enableExecuteCommand: true in my aws-ecs-patterns.ApplicationLoadBalancedFargateService construct.

Proposed Solution

This is currently possible with the ecs module but not the ecs-patterns (see https://docs.aws.amazon.com/cdk/api/latest/docs/aws-ecs-readme.html#ecs-exec-command)

Relevant PRs: https://github.com/aws/aws-cdk/issues/13618 https://github.com/aws/aws-cdk/pull/14670

Solution would be to enable this flag in the higher level ecs-patterns constructs as well.

---

This is a 🚀 Feature Request

[camharris]

Here’s how I handled this in typescript, maybe it’s helpful for others. I added the AWS managed police for ssmmessages.

        const ecsDeployment = new ecs_patterns.ApplicationLoadBalancedFargateService(this, 'EcsPattern', {
          ....
        });

        // Add need policy for EnabledExecuteCommand
        ecsDeployment.taskDefinition.taskRole.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'))

        // Use escape hatch to add EnabledExecuteCommand to cf template
        const cfnService = ecsDeployment.service.node.defaultChild as ecs.CfnService;
        cfnService.addPropertyOverride('EnableExecuteCommand', true)
 

[ghost]

FYI, I found a workaround using Escape Hatches https://docs.aws.amazon.com/cdk/latest/guide/cfn_layer.html

My workaround is (Python) :

cfn_service = self.web_service.service.node.default_child
cfn_service.add_override("Properties.EnableExecuteCommand", True)