Ensure there are no services with admin roles for Amazon Elastic Container Service (ECS)

AWS ECS services with Admin roles may lead to unauthorized access to resources in full capacity.

The role can only be altered when using a networking configuration other than awsvpc in a task definition. You must also use a load balancer with a single target group. For more information on how to properly configure a task definition, see the AWS documentation.

In AWS Console -

1. Sign in to the AWS Console and go to the Amazon ECS console.
2. Select Task Definitions.
3. Create a new Task Definition with the appropriate Task Role on the Environment page.

In Terraform -

1. In the aws_ecs_service resource, set the iam_role field to a value that does not contain an admin role.

References:
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service_definition_parameters.html
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecs_service