Jan Marais
02/02/2021, 5:43 PMprefect agent ecs start
with any of the aws cli ways
• setting task_role_arn
on either agent start or ECSRun
• setting execution_role_arn
on either agent start or ECSRun
• In the task container
Any insight on the differences of these would also be appreciated.Jim Crist-Harif
02/02/2021, 5:45 PMtask_role_arn
either on the agent (default for all flow runs started by the agent) or as part of ECSRun
.task_role_arn
and execution_role_arn
is a bit confusing. Task roles are for assigning IAM policies to things the task can do once it starts (e.g. pull from S3). Execution roles are for things AWS needs to start the container (e.g. pull an image from ECR).Jan Marais
02/02/2021, 5:46 PMJim Crist-Harif
02/02/2021, 6:09 PM