Run One-Off ECS Tasks With AWS SDK v3 (RunTask)

Start a Fargate task from Node.js with RunTaskCommand, wait for it to stop, read the container's exit code and logs, and grant only the IAM it needs.