ecs:CreateCapacityProvider is a Write access-level action in the ecs service. Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling
ARNs that ecs:CreateCapacityProvider can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ecs:CreateCapacityProvider.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the instance metadata tags propagation setting of your Amazon ECS capacity provider
Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service
Filters access by the tag key-value pairs attached to the resource
A minimal policy that allows ecs:CreateCapacityProvider. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsCreateCapacityProvider",
"Effect": "Allow",
"Action": "ecs:CreateCapacityProvider",
"Resource": "*"
}
]
}