ecs:RegisterTaskDefinition is a Write access-level action in the ecs service. Grants permission to register a new task definition from the supplied family and containerDefinitions
ARNs that ecs:RegisterTaskDefinition can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ecs:RegisterTaskDefinition.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the required compatibilities field provided in the request
Filters access by the privileged field provided in the request
Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request
Filters access by the task memory, as an integer representing MiB, provided in the request
Filters access by the tag key-value pairs attached to the resource
A minimal policy that allows ecs:RegisterTaskDefinition. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsRegisterTaskDefinition",
"Effect": "Allow",
"Action": "ecs:RegisterTaskDefinition",
"Resource": "*"
}
]
}