Add ecs:TagResource policy for cicd group

Merge pull request #43 from mwidurek/DSET-1030-ecs-tag-policy

Added ecs:TagResource policy for cicd group

Add drop_invalid_header_fields load balancer option

A security audit highlighted a suggestion that load balancers for our apps should block invalid requests to help prevent desync attacks - this adds an optional parameter to turn this setting on.

Fixed separator for DD_TAGS

• DD_TAGS requires tags with space separator

Defined DD_TAGS for dd-agent container and datadog_tags var

• new variable is created: datadog_tags for datadog agent only
• datadog agent container has new DD_TAGS environment var

Added dd_source for datadog logging

• Added source tag for data logging so that its easier to search and process.

DD Service gets value from app name

• DD forwarder has new value for: "dd_service" = var.app

Reference ECR via resource ARN and not name

• Renamed ecr_repository_name -> ecr_repository_arn. Clients are now expected to pass in an ECR arn and not name.

Added AwsFireLens task to forward app service logs to datadog.

• Added flag enable_datadog_log_forwarding to enable/disable forwarding logs to datadog
• New container definition to set up awsFireLens for logging

Fix syntax

Fix syntax in output.tf

Expose app_role id

Expose app_role id so that we can reference it in policies.