I like the idea. The main thing I'd want to adopt this design is a comparable ability to inject environment variable secrets into lambda that ECS offers.

It'd also be nice to have a better log aggregation strategy for lambda than scraping cloudwatch, but that feels less important.