ale
03/11/2021, 6:57 PMZanie
03/11/2021, 7:00 PMale
03/11/2021, 7:05 PMZanie
03/11/2021, 7:06 PMECS register, deregister, and run tasks, and some EC2 calls by default to infer things about the vpc/subnets (describe vpcs, describe subnets)
ale
03/11/2021, 7:07 PMZanie
03/11/2021, 7:15 PMECSAgent
required IAM permissions"Marvin
03/11/2021, 7:16 PMale
03/11/2021, 8:30 PMRobert Bastian
03/12/2021, 12:16 AMciaran
03/25/2021, 2:22 PMale
03/25/2021, 2:25 PMciaran
03/25/2021, 2:26 PMale
03/25/2021, 3:02 PM0.13.13
😅Roger L.
04/07/2021, 2:09 PMecs:*
permissions to my ECSAgent and I have checked CloudTrail logs to find out which actions is the agent performing. This is my current policy:{
"Statement": [
{
"Action": [
"ecs:RunTask",
"ecs:RegisterTaskDefinition",
"ecs:DeregisterTaskDefinition"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": "iam:PassRole",
"Effect": "Allow",
"Resource": [
"arn:aws:iam::4XXXXX:role/PrefectFlowStagingTaskRole",
"arn:aws:iam::4XXXXX:role/PrefectFlowStagingTaskExecutionRole"
]
}
],
"Version": "2012-10-17"
}
PrefectFlowStagingTaskRole
and PrefectFlowStagingTaskExecutionRole
are the roles that the agent passes to the deployed task on Fargate.ale
04/07/2021, 2:16 PMRoger L.
04/07/2021, 2:17 PMciaran
04/07/2021, 2:18 PMRoger L.
04/07/2021, 2:18 PM"ecs:StopTask"
, but hope it helps guys. I am still on it 😛ciaran
04/07/2021, 2:19 PMRoger L.
04/07/2021, 2:19 PMciaran
04/07/2021, 2:30 PMale
04/07/2021, 2:51 PMZanie
04/07/2021, 2:52 PMciaran
04/07/2021, 2:54 PMRoger L.
04/07/2021, 3:16 PM