James
09/11/2024, 6:28 PMMarvin
09/11/2024, 6:28 PMJames
09/11/2024, 6:29 PMMarvin
09/11/2024, 6:29 PMaws iam create-role
command to create the roles, such as the ecsTaskExecutionRole
.
Example command:
aws iam create-role \
--role-name ecsTaskExecutionRole \
--assume-role-policy-document <file://ecs-trust-policy.json>
2. Attach the Policy:
To allow the ECS worker to pull images from ECR and publish logs to CloudWatch, you should attach the AmazonECSTaskExecutionRolePolicy
managed policy to the role.
For detailed steps and example trust policy documents, refer to:
- Prefect AWS ECS Guide
- Prefect AWS ECS Worker
This should help you configure your assume role policy correctly!