we current use ECS for running agents: if I need to issue some kind of IAM permission to the actual flow run, should that be placed in the agent policy or the task policy?

task_role_arn is what you need - you can set it directly on ECSRun()

awesome, thank you!