ecs:DeleteAccountSetting is a Write access-level action in the ecs service. Grants permission to modify the ARN and resource ID format of a resource for a specified IAM user, IAM role, or the root user for an account. You can specify whether the new ARN and resource ID format are disabled for new resources that are created
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows ecs:DeleteAccountSetting. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsDeleteAccountSetting",
"Effect": "Allow",
"Action": "ecs:DeleteAccountSetting",
"Resource": "*"
}
]
}