ecs:RunTask is a Write access-level action in the ecs service. Grants permission to start a task using random placement and the default Amazon ECS scheduler
ARNs that ecs:RunTask can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ecs:RunTask.
Filters access by the tags that are passed in the request
Filters access by the tag key-value pairs attached to the resource
Filters access by the tag keys that are passed in the request
Filters access by the ARN of an Amazon ECS capacity provider
Filters access by the ARN of an Amazon ECS cluster
Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service
Filters access by the execute-command capability of your Amazon ECS task or Amazon ECS service
Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request
Filters access by the task memory, as an integer representing MiB, provided in the request
Filters access by the tag key-value pairs attached to the resource
A minimal policy that allows ecs:RunTask. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEcsRunTask",
"Effect": "Allow",
"Action": "ecs:RunTask",
"Resource": "*"
}
]
}