feat: Add support for AWS ECS Exec

Feature: Adds support for AWS ECS Exec, allowing for interactive sessions and
command execution inside a container. Useful to support triage and
debug.

Author: stevenwilliamson

README.md

@@ -323,6 +323,7 @@ allow_github_webhooks        = true
 | <a name="input_ecs_service_platform_version"></a> [ecs\_service\_platform\_version](#input\_ecs\_service\_platform\_version) | The platform version on which to run your service | `string` | `"LATEST"` | no |
 | <a name="input_ecs_task_cpu"></a> [ecs\_task\_cpu](#input\_ecs\_task\_cpu) | The number of cpu units used by the task | `number` | `256` | no |
 | <a name="input_ecs_task_memory"></a> [ecs\_task\_memory](#input\_ecs\_task\_memory) | The amount (in MiB) of memory used by the task | `number` | `512` | no |
+| <a name="input_ecs_service_enable_execute_command"></a> [ecs\_service\_enable\_execute\_command](#ecs\_service\_enable\_execute\_command) | Controls if ECS Service enable ECS execute command feature | `bool` | `true` | no |
 | <a name="input_enable_ecs_managed_tags"></a> [enable\_ecs\_managed\_tags](#input\_enable\_ecs\_managed\_tags) | Specifies whether to enable Amazon ECS managed tags for the tasks within the service | `bool` | `false` | no |
 | <a name="input_entrypoint"></a> [entrypoint](#input\_entrypoint) | The entry point that is passed to the container | `list(string)` | `null` | no |
 | <a name="input_essential"></a> [essential](#input\_essential) | Determines whether all other containers in a task are stopped, if this container fails or stops for any reason. Due to how Terraform type casts booleans in json it is required to double quote this value | `bool` | `true` | no |

main.tf

@@ -605,6 +605,7 @@ resource "aws_ecs_service" "atlantis" {
   deployment_maximum_percent         = var.ecs_service_deployment_maximum_percent
   deployment_minimum_healthy_percent = var.ecs_service_deployment_minimum_healthy_percent
   force_new_deployment               = var.ecs_service_force_new_deployment
+  enable_execute_command             = var.ecs_service_enable_execute_command
 
   network_configuration {
     subnets          = local.private_subnet_ids

variables.tf

@@ -613,3 +613,9 @@ variable "ecs_service_force_new_deployment" {
   type        = bool
   default     = false
 }
+
+variable  "ecs_service_enable_execute_command" {
+  description = "Enable ECS exec for the service. This can be used to allow interactive sessions and commands to be executed in the container"
+  type        = bool
+  default     = false
+}