AWS AmazonECS documentation change

Service: AmazonECS · 2025-07-18 · Documentation low

File: AmazonECS/latest/developerguide/instance_IAM_role.md

Summary

Added JSON formatting, corrected typo, and added awsvpcTrunking account setting permissions

Security assessment

Documents required IAM permissions for awsvpcTrunking configuration, which relates to network security features

Diff

diff --git a/AmazonECS/latest/developerguide/instance_IAM_role.md b/AmazonECS/latest/developerguide/instance_IAM_role.md
index b7647589b..401f90a79 100644
--- a//AmazonECS/latest/developerguide/instance_IAM_role.md
+++ b//AmazonECS/latest/developerguide/instance_IAM_role.md
@@ -5 +5 @@
-Create the container instance roleAmazon ECR permissions Permissions required for setting the awsvpcTrunking account setting Amazon S3 read-only access Monitoring container instances permissions
+Create the container instance roleAmazon ECR permissions Permissions required for setting the awsvpcTrunking account setting Amazon S3 read-only access  Permissions required for setting the awsvpcTrunking account settingMonitoring container instances permissions
@@ -61,0 +62,8 @@ Replace all `user input` with your own values.
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -122,0 +132,6 @@ The Amazon ECS container instance role that you use with your container instance
+JSON
+    
+
+****
+    
+    
@@ -147,0 +164,6 @@ The container instance role that you use with your container instances must have
+JSON
+    
+
+****
+    
+    
@@ -164 +186,2 @@ The container instance role that you use with your container instances must have
-In order to use the conatiner instance role, add the following to instance user data:
+
+In order to use the container instance role, add the following to instance user data:
@@ -188,0 +212,20 @@ You can also use the IAM console to add Amazon S3 read-only access (`AmazonS3Rea
+##  Permissions required for setting the awsvpcTrunking account setting
+
+The Amazon ECS container instance role that you use with your container instances must have the following IAM policy permissions for setting the account setting 
+    
+    
+    {
+        "Version": "2012-10-17",
+        "Statement": [
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "ecs:ListAccountSettings", 
+                    "ecs:ListAttributes", 
+                    "ecs:PutAccountSetting" 
+                ],
+                "Resource": "*"
+            }
+        ]
+    }
+
@@ -245,0 +289,8 @@ AWS CLI
+JSON
+
+JSON
+    
+
+****
+    
+