<@ULVA73B9P>, what ARN should I use for the princi...
# ask-marvin
j
@Marvin, what ARN should I use for the principal AWS user for Prefect when setting an AWS assumerolepolicy?
m
You ask about which ARN to use for the principal when setting an AWS AssumeRole policy for Prefect. Before diving deep, can you tell me which version of Prefect you are using?
j
@Marvin Version 2.13.0 (cloud)
m
To set up the AssumeRole policy for Prefect on AWS, you can follow the ECS integration guide from Prefect documentation. Here is a summary: 1. Create the Role: Use the
aws iam create-role
command to create the roles, such as the
ecsTaskExecutionRole
. Example command:
Copy code
aws iam create-role \
   --role-name ecsTaskExecutionRole \
   --assume-role-policy-document <file://ecs-trust-policy.json>
2. Attach the Policy: To allow the ECS worker to pull images from ECR and publish logs to CloudWatch, you should attach the
AmazonECSTaskExecutionRolePolicy
managed policy to the role. For detailed steps and example trust policy documents, refer to: - Prefect AWS ECS Guide - Prefect AWS ECS Worker This should help you configure your assume role policy correctly!