Your ECS Task or Lambda cannot assume its IAM role because the trust relationship is missing the sts:AssumeRole action.