AWS AmazonECS documentation change

Service: AmazonECS · 2025-06-25 · Documentation low

File: AmazonECS/latest/developerguide/console-permissions.md

Summary

Added new section 'Permissions required for enabling Amazon ECS lifecycle events inContainer Insights' with required IAM permissions and policy example

Security assessment

Documents required IAM permissions (events:PutRule, events:PutTargets, logs:CreateLogGroup) for configuring lifecycle event monitoring, which is a security-related configuration but does not address a specific vulnerability

Diff

diff --git a/AmazonECS/latest/developerguide/console-permissions.md b/AmazonECS/latest/developerguide/console-permissions.md
index a25e4558a..893017f58 100644
--- a//AmazonECS/latest/developerguide/console-permissions.md
+++ b//AmazonECS/latest/developerguide/console-permissions.md
@@ -5 +5 @@
-Permissions for creating IAM rolesPermissions required for registering an external instance to a clusterPermissions required for registering a task definitionPermissions required for creating an EventBridge rule for scheduled tasksPermissions required for viewing service deploymentsPermissions required to view Amazon ECS lifecycle events in Container Insights
+Permissions for creating IAM rolesPermissions required for registering an external instance to a clusterPermissions required for registering a task definitionPermissions required for creating an EventBridge rule for scheduled tasksPermissions required for viewing service deploymentsPermissions required to view Amazon ECS lifecycle events in Container InsightsPermissions required for enabling Amazon ECS lifecycle events inContainer Insights
@@ -210,0 +211,29 @@ The following permissions are required to view the lifecycle events. Add the fol
+## Permissions required for enabling Amazon ECS lifecycle events inContainer Insights
+
+The following permissions are required to configure the lifecycle events:
+
+  * events:PutRule
+
+  * events:PutTargets
+
+  * logs:CreateLogGroup
+
+
+
+    
+    
+    {
+      "Version": "2012-10-17",
+      "Statement": [
+        {
+          "Effect": "Allow",
+          "Action": [
+            "events:PutRule",
+            "events:PutTargets",
+            "logs:CreateLogGroup"
+          ],
+          "Resource": "*"
+        }
+      ]
+    }
+