feat(ecs-patterns): allow specifying task role for QueueProcessingFargateService and QueueProcessingEc2Service

packages/aws-cdk-lib/aws-ecs-patterns/lib/base/queue-processing-service-base.ts

@@ -8,6 +8,7 @@ import type {
 import {
   AwsLogDriver, Cluster,
 } from '../../../aws-ecs';
+import type { IRole } from '../../../aws-iam';
 import type { IQueue } from '../../../aws-sqs';
 import { Queue } from '../../../aws-sqs';
 import { CfnOutput, Duration, FeatureFlags, Stack, ValidationError } from '../../../core';
@@ -195,6 +196,15 @@ export interface QueueProcessingServiceBaseProps {
    */
   readonly family?: string;
 
+  /**
+   * The role that will be used by the task.
+   *
+   * Only used when `image` is specified (not when `taskDefinition` is provided).
+   *
+   * @default - A new role is created
+   */
+  readonly taskRole?: IRole;
+
   /**
    * The maximum number of tasks, specified as a percentage of the Amazon ECS
    * service's DesiredCount value, that can run in a service during a

packages/aws-cdk-lib/aws-ecs-patterns/lib/ecs/queue-processing-ecs-service.ts

@@ -116,6 +116,7 @@ export class QueueProcessingEc2Service extends QueueProcessingServiceBase {
     // Create a Task Definition for the container to start
     this.taskDefinition = new Ec2TaskDefinition(this, 'QueueProcessingTaskDef', {
       family: props.family,
+      taskRole: props.taskRole,
     });
     this.taskDefinition.addContainer(containerName, {
       image: props.image,

packages/aws-cdk-lib/aws-ecs-patterns/lib/fargate/queue-processing-fargate-service.ts

@@ -91,6 +91,7 @@ export class QueueProcessingFargateService extends QueueProcessingServiceBase {
         ephemeralStorageGiB: props.ephemeralStorageGiB,
         family: props.family,
         runtimePlatform: props.runtimePlatform,
+        taskRole: props.taskRole,
       });
 
       const containerName = props.containerName ?? 'QueueProcessingContainer';