ecs:PutAccountSettingDefault is a Write access-level action in the ecs service. Grants permission to modify the ARN and resource ID format of a resource type for all IAM users on an account for which no individual account setting has been set. Enabling this setting is required to use new Amazon ECS features such as resource tagging
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows ecs:PutAccountSettingDefault. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsPutAccountSettingDefault",
"Effect": "Allow",
"Action": "ecs:PutAccountSettingDefault",
"Resource": "*"
}
]
}