AWS AmazonECS documentation change
Summary
Removed inline permissions documentation and linked to console-permissions guide instead
Security assessment
Restructured documentation by moving security permissions to dedicated page, but does not add new security content
Diff
diff --git a/AmazonECS/latest/developerguide/task_execution_IAM_role.md b/AmazonECS/latest/developerguide/task_execution_IAM_role.md index 708565d5f..554a55d8a 100644 --- a//AmazonECS/latest/developerguide/task_execution_IAM_role.md +++ b//AmazonECS/latest/developerguide/task_execution_IAM_role.md @@ -5 +5 @@ -Creating the task execution rolePrivate registry authentication permissionsSecrets Manager or Systems Manager permissionsFargate tasks pulling Amazon ECR images over interface endpoints permissionsAmazon ECR permissionsAmazon S3 file storage permissionsPermissions required to configure Container Insights to view Amazon ECS lifecycle events +Creating the task execution rolePrivate registry authentication permissionsSecrets Manager or Systems Manager permissionsFargate tasks pulling Amazon ECR images over interface endpoints permissionsAmazon ECR permissionsAmazon S3 file storage permissions @@ -124 +124 @@ Host configuration files in an Amazon S3 bucket | Amazon S3 file storage permiss -Configure Container Insights to view Amazon ECS lifecycle events | Permissions required to configure Container Insights to view Amazon ECS lifecycle events +Configure Container Insights to view Amazon ECS lifecycle events | [Permissions required for enabling Amazon ECS lifecycle events inContainer Insights](./console-permissions.html#required-permissions-configure) @@ -335,29 +334,0 @@ The following example policy adds the required permissions for retrieving a file -## Permissions required to configure Container Insights to view Amazon ECS lifecycle events - -The following permissions are required in the task role to configure the lifecycle events: - - * events:PutRule - - * events:PutTargets - - * logs:CreateLogGroup - - - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "events:PutRule", - "events:PutTargets", - "logs:CreateLogGroup" - ], - "Resource": "*" - } - ] - } -