Sha256: 14447f6ea1b9494b63a6b75a6df697bbe8d10ef4726b0d93f9112ffc1a3da561
Contents?: true
Size: 710 Bytes
Versions: 36
Compression:
Stored size: 710 Bytes
Contents
# Example starter execution role.
# IAM Role permissions that EC2 Instance or host needs.
#
# Docs: https://ufoships.com/docs/iam-roles/
#
# Starter IAM permissions for secrets, ssm, and minimal ecr and cloudwatch permissions
iam_policy("SsmParameterStore",
Action: [
"ssm:GetParameters",
],
Effect: "Allow",
Resource: "*"
)
iam_policy("SecretsManager",
Action: [
"secretsmanager:GetSecretValue",
],
Effect: "Allow",
Resource: "*"
)
# AmazonECSTaskExecutionRolePolicy includes use cases. Minimal ecr and logs permissions.
# See: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html
managed_iam_policy("service-role/AmazonECSTaskExecutionRolePolicy")
Version data entries
36 entries across 36 versions & 1 rubygems