(aws-ecs): Support TLS on ServiceConnect services

[jwilson-anonyome]

Describe the feature

Service Connect permits TLS between (traffic encryption) for connections to services (e.g. from ALB to a service in ECS)

This can be enabled with the console, or with Cloudformation, but it seems not yet with CDK

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/enable-service-connect-tls.html
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-service-serviceconnectservice.html

Can we get a "TLS" option added to ServiceConnectService?

https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ecs.ServiceConnectService.html

Use Case

I need to be able to use CDK to secure internal connections to ECS/Fargate services

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.172.0

Environment details (OS name and version, etc.)

CDK running on macos or alpine linux

[khushail]

Thanks @jwilson-anonyome for requesting this. Checking CDK Code, seems like prop could be added in this interface -
ServiceConnectService -

aws-cdk/packages/aws-cdk-lib/aws-ecs/lib/base/base-service.ts

Line 194 in f8e6207

export interface ServiceConnectService {

Marking it as P2 as team won't be available to work on it immediately but it would be on their radar. Also contributions from community are welcome. Thanks.