ecs:UpdateExpressGatewayService

Write

ecs:UpdateExpressGatewayService is a Write access-level action in the ecs service. Grants permission to modify the parameters of an Express Gateway service

Resource types

ARNs that ecs:UpdateExpressGatewayService can be scoped to in an IAM policy.

arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName} required
service

Condition keys

Keys you can use in the Condition block of a policy that grants ecs:UpdateExpressGatewayService.

ecs:enable-ecs-managed-tags Bool

Filters access by the enableECSManagedTags configuration of your Amazon ECS task or Amazon ECS service

ecs:propagate-tags String

Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service

ecs:subnet ArrayOfString

Filters access by the subnet configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode

ecs:task-cpu Numeric

Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request

ecs:task-definition ARN

Filters access by the ARN of an Amazon ECS task definition

ecs:task-memory Numeric

Filters access by the task memory, as an integer representing MiB, provided in the request

aws:ResourceTag/${TagKey} String

Filters access by the tag key-value pairs attached to the resource

ecs:cluster ARN

Filters access by the ARN of an Amazon ECS cluster

Example IAM policy

A minimal policy that allows ecs:UpdateExpressGatewayService. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowEcsUpdateExpressGatewayService",
      "Effect": "Allow",
      "Action": "ecs:UpdateExpressGatewayService",
      "Resource": "*"
    }
  ]
}

Related actions in ecs

View all ecs actions →