I created a stack transformation to patch ECS taskdefinitions for the Crowdstrike falcon sensor so I did not have to do this in each of my existing services. Maybe someone will find this useful. https://github.com/thompsa/pulumi-crowdstrike-ecs/blob/main/falcon.ts