Any insight on why this is giving me issues saying assumed role isn't allowed to run EC2 RunTask

const amassScanTask = new awsx.ecs.FargateTaskDefinition("amassScanTask", {
	container: {
		image: awsx.ecs.Image.fromPath("amassScanTask", "./app/amass"),
	},
});

let engineEndpoint = new awsx.apigateway.API("dns-scan-api", {
	routes: [{
		path: "/dns",
		method: "POST",
		eventHandler: async (event) => {
			const taskUUID = uuid();
			let route = event.queryStringParameters!["target"]
			await amassScanTask.run({ 
				cluster: cluster,
				overrides: {
					containerOverrides: [{
						environment: [
							{ name: "TASK_ID", value: taskUUID },
							{ name: "TARGET_DOMAIN", value: "<http://filo.ai|filo.ai>" },
							{ name: "S3_BUCKET", value: `${scanResultsBucket.id}` },
						],
					}],
				},
			});
			return {
				statusCode: 200,
				body: JSON.stringify({ route, taskUUID }),
			};
		},
	}],
});