ecs

81 actions in the ecs service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

ecs:AllowVendedLogDeliveryForResource

Permissions management

Grants permission to allow vended log delivery for a specified resource

ecs:ContinueServiceDeployment

Write

Grants permission to continue a paused service deployment

ecs:CreateCapacityProvider

Write

Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling

ecs:CreateCluster

Write

Grants permission to create a new Amazon ECS cluster

ecs:CreateDaemon

Write

Grants permission to create a new daemon in a specified cluster

ecs:CreateExpressGatewayService

Write

Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition

ecs:CreateService

Write

Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation

ecs:CreateTaskSet

Write

Grants permission to create a new Amazon ECS task set

ecs:DeleteAccountSetting

Write

Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created

ecs:DeleteAttributes

Write

Grants permission to delete one or more custom attributes from an Amazon ECS resource

ecs:DeleteCapacityProvider

Write

Grants permission to delete the specified capacity provider

ecs:DeleteCluster

Write

Grants permission to delete the specified cluster

ecs:DeleteDaemon

Write

Grants permission to delete a specified daemon within a cluster

ecs:DeleteDaemonTaskDefinition

Write

Grants permission to delete the specified daemon task definition

ecs:DeleteExpressGatewayService

Write

Grants permission to delete a specified Express Gateway service

ecs:DeleteService

Write

Grants permission to delete a specified service within a cluster

ecs:DeleteTaskDefinitions

Write

Grants permission to delete the specified task definitions by family and revision

ecs:DeleteTaskSet

Write

Grants permission to delete the specified task set

ecs:DeregisterContainerInstance

Write

Grants permission to deregister an Amazon ECS container instance from the specified cluster

ecs:DeregisterTaskDefinition

Write

Grants permission to deregister the specified task definition by family and revision

ecs:DescribeCapacityProviders

Read

Grants permission to describe one or more Amazon ECS capacity providers

ecs:DescribeClusters

Read

Grants permission to describes one or more of your clusters

ecs:DescribeContainerInstances

Read

Grants permission to describes Amazon ECS container instances

ecs:DescribeDaemon

Read

Grants permission to describe the specified daemon running in your cluster

ecs:DescribeDaemonDeployments

Read

Grants permission to describe one or more of your daemon deployments

ecs:DescribeDaemonRevisions

Read

Grants permission to describe one or more of your daemon revisions

ecs:DescribeDaemonTaskDefinition

Read

Grants permission to describe a daemon task definition

ecs:DescribeExpressGatewayService

Read

Grants permission to describe the specified Express Gateway service

ecs:DescribeServiceDeployments

Read

Grants permission to describe one or more of your service deployments

ecs:DescribeServiceRevisions

Read

Grants permission to describe one or more of your service revisions

ecs:DescribeServices

Read

Grants permission to describe the specified services running in your cluster

ecs:DescribeTaskDefinition

Read

Grants permission to describe a task definition. You can specify a family and revision to find information about a specific task definition, or you can simply specify the family to find the latest ACTIVE revision in that family

ecs:DescribeTasks

Read

Grants permission to describe a specified task or tasks

ecs:DescribeTaskSets

Read

Grants permission to describe Amazon ECS task sets

ecs:DiscoverPollEndpoint

Write

Grants permission to get an endpoint for the Amazon ECS agent to poll for updates

ecs:ExecuteCommand

Write

Grants permission to run a command remotely on an Amazon ECS container

ecs:GetTaskProtection

Read

Grants permission to retrieve the protection status of tasks in an Amazon ECS service

ecs:ListAccountSettings

Read

Grants permission to list the account settings for an Amazon ECS resource for a specified principal

ecs:ListAttributes

List

Grants permission to lists the attributes for Amazon ECS resources within a specified target type and cluster

ecs:ListClusters

List

Grants permission to get a list of existing clusters

ecs:ListContainerInstances

List

Grants permission to get a list of container instances in a specified cluster

ecs:ListDaemonDeployments

List

Grants permission to get a list of daemon deployments for a specified daemon

ecs:ListDaemons

List

Grants permission to get a list of daemons that are running in a specified cluster

ecs:ListDaemonTaskDefinitions

List

Grants permission to get a list of daemon task definitions that are registered to your account

ecs:ListServiceDeployments

List

Grants permission to get a list of service deployments for a specified service

ecs:ListServices

List

Grants permission to get a list of services that are running in a specified cluster

ecs:ListServicesByNamespace

List

Grants permission to get a list of services that are running in a specified AWS Cloud Map Namespace

ecs:ListTagsForResource

Read

Grants permission to get a list of tags for the specified resource

ecs:ListTaskDefinitionFamilies

List

Grants permission to get a list of task definition families that are registered to your account (which may include task definition families that no longer have any ACTIVE task definitions)

ecs:ListTaskDefinitions

List

Grants permission to get a list of task definitions that are registered to your account

ecs:ListTasks

List

Grants permission to get a list of tasks for a specified cluster

ecs:Poll

Write

Grants permission to an agent to connect with the Amazon ECS service to report status and get commands

ecs:PutAccountSetting

Write

Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are enabled for new resources that are created. Enabling this setting is required to use new Amazon ECS features such as resource tagging

ecs:PutAccountSettingDefault

Write

Grants permission to modify the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging

ecs:PutAttributes

Write

Grants permission to create or update an attribute on an Amazon ECS resource

ecs:PutClusterCapacityProviders

Write

Grants permission to modify the available capacity providers and the default capacity provider strategy for a cluster

ecs:PutSystemLogEvents

Write

Grants permission to collect system logs from the container instances

ecs:RegisterContainerInstance

Write

Grants permission to register an EC2 instance into the specified cluster

ecs:RegisterDaemonTaskDefinition

Write

Grants permission to register a new daemon task definition from the supplied family and containerDefinitions

ecs:RegisterTaskDefinition

Write

Grants permission to register a new task definition from the supplied family and containerDefinitions

ecs:RunTask

Write

Grants permission to start a task using random placement and the default Amazon ECS scheduler

ecs:StartTask

Write

Grants permission to start a new task from the specified task definition on the specified container instance or instances

ecs:StartTelemetrySession

Write

Grants permission to start a telemetry session

ecs:StopServiceDeployment

Write

Grants permission to stop an ongoing service deployment

ecs:StopTask

Write

Grants permission to stop a running task

ecs:SubmitAttachmentStateChanges

Write

Grants permission to send an acknowledgement that attachments changed states

ecs:SubmitContainerStateChange

Write

Grants permission to send an acknowledgement that a container changed states

ecs:SubmitTaskStateChange

Write

Grants permission to send an acknowledgement that a task changed states

ecs:TagResource

Tagging

Grants permission to tag the specified resource

ecs:UntagResource

Tagging

Grants permission to untag the specified resource

ecs:UpdateCapacityProvider

Write

Grants permission to update the specified capacity provider

ecs:UpdateCluster

Write

Grants permission to modify the configuration or settings to use for a cluster

ecs:UpdateClusterSettings

Write

Grants permission to modify the settings to use for a cluster

ecs:UpdateContainerAgent

Write

Grants permission to update the Amazon ECS container agent on a specified container instance

ecs:UpdateContainerInstancesState

Write

Grants permission to the user to modify the status of an Amazon ECS container instance

ecs:UpdateDaemon

Write

Grants permission to modify the parameters of a daemon

ecs:UpdateExpressGatewayService

Write

Grants permission to modify the parameters of an Express Gateway service

ecs:UpdateService

Write

Grants permission to modify the parameters of a service

ecs:UpdateServicePrimaryTaskSet

Write

Grants permission to modify the primary task set used in a service

ecs:UpdateTaskProtection

Write

Grants permission to modify the protection status of a task

ecs:UpdateTaskSet

Write

Grants permission to update the specified task set