ecs:DeleteAccountSetting is a Write access-level action in the ecs service. Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants ecs:DeleteAccountSetting.
Filters access by the Amazon ECS account setting name
A minimal policy that allows ecs:DeleteAccountSetting. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsDeleteAccountSetting",
"Effect": "Allow",
"Action": "ecs:DeleteAccountSetting",
"Resource": "*"
}
]
}