ECS does support daemonsets though. In that case you would have one log container for each EC2 instance.

Here is an article from AWS about using Fluent Bit as a log daemon: https://aws.amazon.com/blogs/opensource/centralized-container-logging-fluent-bit/

Not sure about AWS Firelens though