fix: add ecs-tasks to fargate role

Signed-off-by: Theo Bob Massard <[email protected]>
tbobm · Apr 7, 2021 · 63a5292 · 63a5292
1 parent 88daceb
commit 63a5292
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/terraform/iam.tf b/terraform/iam.tf
@@ -14,7 +14,10 @@ resource "aws_iam_role" "fargate" {
  Effect = "Allow"
  Sid = ""
  Principal = {
- Service = "ecs.amazonaws.com"
+ Service = [
+ "ecs.amazonaws.com",
+ "ecs-tasks.amazonaws.com"
+ ]
  }
  },
  ]
@@ -32,7 +35,10 @@ resource "aws_iam_user_policy" "publisher" {
  "Statement": [
  {
  "Action": [
+ "iam:PassRole",
+ "iam:GetRole",
  "ecs:DescribeTaskDefinition",
+ "ecs:DescribeServices",
  "ecs:UpdateService",
  "ecs:RegisterTaskDefinition",
  "ecr:CompleteLayerUpload",