Add some docs about the new var

distribution/ecs/README.md

@@ -55,6 +55,10 @@ You can use sidecars to inject additional secrets as files. This can be
 useful for configuring sources such as Kafka. See `./example/kafka.tf` for an
 example.
 
+To access external AWS services like the Kinesis source, use the
+`quickwit_indexer.extra_task_policy_arns` variable to attach the necessary
+IAM policies to the nodes.
+
 ## Running the example stack
 
 We provide an example of self contained deployment with an ad-hoc VPC. 

distribution/ecs/example/terraform.tf

@@ -41,6 +41,7 @@ module "quickwit" {
   #   memory                = 8192
   #   cpu                   = 4096
   #   ephemeral_storage_gib = 50
+  #   extra_task_policy_arns = ["arn:aws:iam::aws:policy/AmazonKinesisFullAccess"]
   # }
 
   # quickwit_metastore = {
@@ -53,7 +54,6 @@ module "quickwit" {
   #   desired_count         = 1
   #   memory                = 2048
   #   cpu                   = 1024
-  #   ephemeral_storage_gib = 21
   # }
 
   # quickwit_control_plane = {