AWS employee here! The relationship is actually one task per EC2 _instance_ (VM isolation), not one task per host. I'm sure you meant the former, but just wanted to clarify for readers.
Something I've been wondering for a while (and you may be placed to answer): is firecracker part of the isolation story for Fargate - or is it regular EC2 instances?
Hi, I'm from the core compute engineering part of AWS.
Like most good stories, there's a beginning, middle, and end. We're in the middle now, and Fargate uses both regular EC2 instances and Firecracker in some cases.