81 actions in the ecs service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to allow vended log delivery for a specified resource
Grants permission to continue a paused service deployment
Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling
Grants permission to create a new Amazon ECS cluster
Grants permission to create a new daemon in a specified cluster
Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition
Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation
Grants permission to create a new Amazon ECS task set
Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created
Grants permission to delete one or more custom attributes from an Amazon ECS resource
Grants permission to delete the specified capacity provider
Grants permission to delete the specified cluster
Grants permission to delete a specified daemon within a cluster
Grants permission to delete the specified daemon task definition
Grants permission to delete a specified Express Gateway service
Grants permission to delete a specified service within a cluster
Grants permission to delete the specified task definitions by family and revision
Grants permission to delete the specified task set
Grants permission to deregister an Amazon ECS container instance from the specified cluster
Grants permission to deregister the specified task definition by family and revision
Grants permission to describe one or more Amazon ECS capacity providers
Grants permission to describes one or more of your clusters
Grants permission to describes Amazon ECS container instances
Grants permission to describe the specified daemon running in your cluster
Grants permission to describe one or more of your daemon deployments
Grants permission to describe one or more of your daemon revisions
Grants permission to describe a daemon task definition
Grants permission to describe the specified Express Gateway service
Grants permission to describe one or more of your service deployments
Grants permission to describe one or more of your service revisions
Grants permission to describe the specified services running in your cluster
Grants permission to describe a task definition. You can specify a family and revision to find information about a specific task definition, or you can simply specify the family to find the latest ACTIVE revision in that family
Grants permission to describe a specified task or tasks
Grants permission to describe Amazon ECS task sets
Grants permission to get an endpoint for the Amazon ECS agent to poll for updates
Grants permission to run a command remotely on an Amazon ECS container
Grants permission to retrieve the protection status of tasks in an Amazon ECS service
Grants permission to list the account settings for an Amazon ECS resource for a specified principal
Grants permission to lists the attributes for Amazon ECS resources within a specified target type and cluster
Grants permission to get a list of existing clusters
Grants permission to get a list of container instances in a specified cluster
Grants permission to get a list of daemon deployments for a specified daemon
Grants permission to get a list of daemons that are running in a specified cluster
Grants permission to get a list of daemon task definitions that are registered to your account
Grants permission to get a list of service deployments for a specified service
Grants permission to get a list of services that are running in a specified cluster
Grants permission to get a list of services that are running in a specified AWS Cloud Map Namespace
Grants permission to get a list of tags for the specified resource
Grants permission to get a list of task definition families that are registered to your account (which may include task definition families that no longer have any ACTIVE task definitions)
Grants permission to get a list of task definitions that are registered to your account
Grants permission to get a list of tasks for a specified cluster
Grants permission to an agent to connect with the Amazon ECS service to report status and get commands
Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are enabled for new resources that are created. Enabling this setting is required to use new Amazon ECS features such as resource tagging
Grants permission to modify the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging
Grants permission to create or update an attribute on an Amazon ECS resource
Grants permission to modify the available capacity providers and the default capacity provider strategy for a cluster
Grants permission to collect system logs from the container instances
Grants permission to register an EC2 instance into the specified cluster
Grants permission to register a new daemon task definition from the supplied family and containerDefinitions
Grants permission to register a new task definition from the supplied family and containerDefinitions
Grants permission to start a task using random placement and the default Amazon ECS scheduler
Grants permission to start a new task from the specified task definition on the specified container instance or instances
Grants permission to start a telemetry session
Grants permission to stop an ongoing service deployment
Grants permission to stop a running task
Grants permission to send an acknowledgement that attachments changed states
Grants permission to send an acknowledgement that a container changed states
Grants permission to send an acknowledgement that a task changed states
Grants permission to tag the specified resource
Grants permission to untag the specified resource
Grants permission to update the specified capacity provider
Grants permission to modify the configuration or settings to use for a cluster
Grants permission to modify the settings to use for a cluster
Grants permission to update the Amazon ECS container agent on a specified container instance
Grants permission to the user to modify the status of an Amazon ECS container instance
Grants permission to modify the parameters of a daemon
Grants permission to modify the parameters of an Express Gateway service
Grants permission to modify the parameters of a service
Grants permission to modify the primary task set used in a service
Grants permission to modify the protection status of a task
Grants permission to update the specified task set