@Marvin, what ARN should I use for the principal AWS user for Prefect when setting an AWS assumerolepolicy?
m
Marvin
09/11/2024, 6:28 PM
You ask about which ARN to use for the principal when setting an AWS AssumeRole policy for Prefect. Before diving deep, can you tell me which version of Prefect you are using?
j
James
09/11/2024, 6:29 PM
@Marvin Version 2.13.0 (cloud)
m
Marvin
09/11/2024, 6:29 PM
To set up the AssumeRole policy for Prefect on AWS, you can follow the ECS integration guide from Prefect documentation. Here is a summary:
1. Create the Role:
Use the
aws iam create-role
command to create the roles, such as the
ecsTaskExecutionRole
.
Example command:
Copy code
aws iam create-role \
--role-name ecsTaskExecutionRole \
--assume-role-policy-document <file://ecs-trust-policy.json>
2. Attach the Policy:
To allow the ECS worker to pull images from ECR and publish logs to CloudWatch, you should attach the
AmazonECSTaskExecutionRolePolicy
managed policy to the role.
For detailed steps and example trust policy documents, refer to:
- Prefect AWS ECS Guide
- Prefect AWS ECS Worker
This should help you configure your assume role policy correctly!
Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.