Amazon Elastic Container Service
(ecs)
IAM Changes
Services
2025-02-27
2025-02-27
8 new conditions | 3 updated actions, 1 updated condition
Additions
Conditions
ecs:auto-assign-public-ip
Description:
Filters access by the public IP assignment configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode
Type:
Bool
ecs:compute-compatibility
Description:
Filters access by the required compatibilities field provided in the request
Type:
ArrayOfString
ecs:enable-ecs-managed-tags
Description:
Filters access by the enableECSManagedTags configuration of your Amazon ECS task or Amazon ECS service
Type:
Bool
ecs:privileged
Description:
Filters access by the privileged field provided in the request
Type:
String
ecs:propagate-tags
Description:
Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service
Type:
String
ecs:subnet
Description:
Filters access by the subnet configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode
Type:
ArrayOfString
ecs:task-cpu
Description:
Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request
Type:
Numeric
ecs:task-memory
Description:
Filters access by the task memory, as an integer representing MiB, provided in the request
Type:
Numeric
Updates
Actions
CreateService
Conditions
+ ecs:enable-ecs-managed-tags
+ ecs:propagate-tags
+ ecs:auto-assign-public-ip
+ ecs:subnet
+ ecs:task-cpu
+ ecs:task-memory
RegisterTaskDefinition
Conditions
+ aws:ResourceTag/${TagKey}
+ ecs:compute-compatibility
+ ecs:privileged
+ ecs:task-cpu
+ ecs:task-memory
Resources
+ task-definition
UpdateService
Conditions
+ ecs:enable-ecs-managed-tags
+ ecs:propagate-tags
+ ecs:auto-assign-public-ip
+ ecs:subnet
+ ecs:task-cpu
+ ecs:task-memory
Conditions
ecs:cluster
Type
ARN
⟶
ArrayOfARN