Skip to content
This repository was archived by the owner on Jan 4, 2024. It is now read-only.

Leveraging AWS managed policy with same functionality instead of inli…#98

Open
meve wants to merge 1 commit into
aws-samples:masterfrom
meve:master
Open

Leveraging AWS managed policy with same functionality instead of inli…#98
meve wants to merge 1 commit into
aws-samples:masterfrom
meve:master

Conversation

@meve

@meve meve commented Feb 21, 2019

Copy link
Copy Markdown

Issue #, if available:
N/A

Description of changes:
I thought it would be appropriate to use an AWS managed policy here as well; please refer to the following contents of the managed policy (arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role):

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ecs:CreateCluster",
                "ecs:DeregisterContainerInstance",
                "ecs:DiscoverPollEndpoint",
                "ecs:Poll",
                "ecs:RegisterContainerInstance",
                "ecs:StartTelemetrySession",
                "ecs:UpdateContainerInstancesState",
                "ecs:Submit*",
                "ecr:GetAuthorizationToken",
                "ecr:BatchCheckLayerAvailability",
                "ecr:GetDownloadUrlForLayer",
                "ecr:BatchGetImage",
                "logs:CreateLogStream",
                "logs:PutLogEvents"
            ],
            "Resource": "*"
        }
    ]
}

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant