code: func (task *Task) ApplyExecutionRoleLogsAuth(hostConfig *dockercontainer.HostConfig, credentialsManager credentials.Manager) *apierrors.HostConfigError {
  	id := task.GetExecutionCredentialsID()
  	if id == "" {
  		// No execution credentials set for the task. Do not inject the endpoint environment variable.
  		return &apierrors.HostConfigError{Msg: "No execution credentials set for the task"}
  	}
  
  	executionRoleCredentials, ok := credentialsManager.GetTaskCredentials(id)
  	if !ok {
  		// Task has credentials id set, but credentials manager is unaware of
  		// the id. This should never happen as the payload handler sets
  		// credentialsId for the task after adding credentials to the
  		// credentials manager
  		return &apierrors.HostConfigError{Msg: "Unable to get execution role credentials for task"}
  	}
  	credentialsEndpointRelativeURI := executionRoleCredentials.IAMRoleCredentials.GenerateCredentialsEndpointRelativeURI()
  	hostConfig.LogConfig.Config[awslogsCredsEndpointOpt] = credentialsEndpointRelativeURI
  	return nil
  }
docs: // ApplyExecutionRoleLogsAuth will check whether the task has execution role
  // credentials, and add the genereated credentials endpoint to the associated HostConfig