Tag ECS services and task definitions with project #196

Overview

We need ECS services and task definitions to carry a project tag, because none of the ten services has one today and ecs:UpdateService cannot be restricted to a project's own services without it.

Action Items

• In terraform/modules/container/main.tf, add the following to the ECS service resources and to the task definition resource:

  tags = {
    project = var.project_name
  }

• Decide whether enable_ecs_managed_tags or propagate_tags should be set on the service so that running tasks inherit the tag, and leave a comment recording the choice either way.
• After the PR merges, confirm the tag is live across all ten services: aws ecs list-tags-for-resource --resource-arn <service-arn>.

Resources/Instructions

• var.project_name is already passed to this module correctly by every project's environment-*.tf, so no new variable is needed.
• Precedent for the change: add project tag to ecr #131 (ECR) and add project tag to secret #130 (SSM parameters).
• Line numbers were accurate when this issue was written (2026-09-01) and may drift; find the code by the resource name if so.