Add ECS deployment workflow

.github/workflows/ecs-deploy.yml

@@ -0,0 +1,101 @@
+name: Deploy to Amazon ECS
+
+on:
+  push:
+    branches:
+      - develop
+  release:
+    types: [released]
+
+env:
+  REGISTRY: ghcr.io
+  AWS_REGION: us-east-1
+  ECS_CLUSTER: raw-data-service
+  ECS_SERVICE: api
+  CONTAINER_NAME: raw-data-api
+  IMAGE_NAME: hotosm/raw-data-api # was ${{ github.repository }}
+
+jobs:
+  build-push-image:
+    name: Build Images
+    runs-on: ubuntu-latest
+    environment: production
+
+    permissions:
+      contents: read
+      packages: write
+
+    outputs:
+      imageid: steps.build-push-image.imageid
+
+    steps:
+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set container image metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+          tags: |
+            type=ref,event=branch
+
+      - name: Build and push container image
+        id: build-push-image
+        uses: docker/build-push-action@v5
+        with:
+          context: "{{defaultContext}}"
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+    environment: production
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: us-east-1
+          role-to-assume: arn:aws:iam::670261699094:role/Github-AWS-OIDC
+          role-session-name: gh-ci-ecs-deploy
+
+      - name: Download task definition
+        run: |
+           aws ecs describe-task-definition --task-definition raw-data-api --query taskDefinition > task-definition.json
+
+      - name: Task definition rendition
+        id: task-def
+        uses: aws-actions/amazon-ecs-render-task-definition@v1
+        with:
+          task-definition: task-definition.json
+          container-name: ${{ env.CONTAINER_NAME }}
+          image: ${{ needs.build-push-image.outputs.imageid }}
+
+      - name: Deploy task definition
+        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+        with:
+          task-definition: ${{ steps.task-def.outputs.task-definition }}
+          service: ${{ env.ECS_SERVICE }}
+          cluster: ${{ env.ECS_CLUSTER }}
+          wait-for-service-stability: true