diff --git a/remote-ingestion-executor/main.tf b/remote-ingestion-executor/main.tf
index 5ff689b..fe1831f 100644
--- a/remote-ingestion-executor/main.tf
+++ b/remote-ingestion-executor/main.tf
@@ -41,6 +41,8 @@ module "ecs_service" {
   security_group_rules = var.security_group_rules
   assign_public_ip     = var.assign_public_ip
 
+  propagate_tags = upper(var.propagate_tags)
+
   container_definitions = {
     dh-remote-executor = {
       cpu    = var.cpu
diff --git a/remote-ingestion-executor/variables.tf b/remote-ingestion-executor/variables.tf
index e9f8a33..0303f4e 100644
--- a/remote-ingestion-executor/variables.tf
+++ b/remote-ingestion-executor/variables.tf
@@ -142,6 +142,17 @@ variable "assign_public_ip" {
   default     = true
 }
 
+variable "propagate_tags" {
+  description = "Whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION"
+  type        = string
+  default     = "NONE"
+
+  validation {
+    condition     = contains(["SERVICE", "TASK_DEFINITION", "NONE"], upper(var.propagate_tags))
+    error_message = "propagate_tags must be one of SERVICE, TASK_DEFINITION, or NONE."
+  }
+}
+
 variable "enable_cloudwatch_logging" {
   description = "Determines whether CloudWatch logging is configured for the container definition"
   type        = bool