Allow permission to modify own ECS cluster

jacobwgillespie · jacobwgillespie · commit d84183b3170f · 2024-09-05T12:30:24.000+01:00
diff --git a/main.tf b/main.tf
@@ -353,7 +353,7 @@ resource "aws_iam_role" "cloud-agent" {
         },
 
         {
-          Action    = ["ecs:ListTasks", "ecs:DescribeTasks", "ecs:StopTask"],
+          Action    = ["ecs:*"],
           Effect    = "Allow",
           Resource  = ["*"],
           Condition = { ArnEquals = { "ecs:cluster" = aws_ecs_cluster.cloud-agent[0].arn } }

Original file line number	Diff line number	Diff line change
`@@ -353,7 +353,7 @@ resource "aws_iam_role" "cloud-agent" {`
`353`	`353`	`},`
`354`	`354`
`355`	`355`	`{`
`356`		`- Action = ["ecs:ListTasks", "ecs:DescribeTasks", "ecs:StopTask"],`
	`356`	`+ Action = ["ecs:*"],`
`357`	`357`	`Effect = "Allow",`
`358`	`358`	`Resource = ["*"],`
`359`	`359`	`Condition = { ArnEquals = { "ecs:cluster" = aws_ecs_cluster.cloud-agent[0].arn } }`