feat(batch): ecs execute command

[badmintoncryer]

Issue # (if applicable)

None

Reason for this change

AWS Batch now supports for ECS execute command(ECS exec) to access to the job container.
https://aws.amazon.com/about-aws/whats-new/2025/04/aws-batch-amazon-elastic-container-service-exec-firelens-log-router/?nc1=h_ls

Description of changes

• Add enableExecuteCommand prop ro EcsContainerDefinitionProps
• handle batch job role to add ecs exec policies

Describe any new or updated permissions being added

• Add some permissions to the job role
  • "ssmmessages:CreateControlChannel",
  • "ssmmessages:CreateDataChannel",
  • "ssmmessages:OpenControlChannel",
  • "ssmmessages:OpenDataChannel"

Description of how you validated changes

Add both unit and integ tests.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[iankhou]

Feature and tests look good, but please remove the Kiro instructions haha

[iankhou]

Looks like this was committed by mistake? Along with the other files in cckiro.

Pull request has been modified.

[badmintoncryer]

@iankhou Thank you for your review and I'm sorry for adding some docs. I've removed them.

[badmintoncryer]

@iankhou Could you please confirm this PR again ?

[iankhou]

Looks good, validated against docs: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html#ecs-exec-required-iam-permissions

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

This pull request has been removed from the queue for the following reason: pull request branch update failed.

The pull request can't be updated.

You should update or rebase your pull request manually. If you do, this pull request will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue, you can requeue the pull request, without updating it, by posting a @mergifyio requeue comment.

Pull request has been modified.

[badmintoncryer]

@iankhou Could you please approve again?

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.