github.com/candidpartners/terraform@v0.9.5-0.20171005231213-29f5f88820f6/examples/aws-ecs-alb/instance-profile-policy.json (about) 1 { 2 "Version": "2012-10-17", 3 "Statement": [ 4 { 5 "Sid": "ecsInstanceRole", 6 "Effect": "Allow", 7 "Action": [ 8 "ecs:DeregisterContainerInstance", 9 "ecs:DiscoverPollEndpoint", 10 "ecs:Poll", 11 "ecs:RegisterContainerInstance", 12 "ecs:Submit*" 13 ], 14 "Resource": [ 15 "*" 16 ] 17 }, 18 { 19 "Sid": "allowLoggingToCloudWatch", 20 "Effect": "Allow", 21 "Action": [ 22 "logs:CreateLogStream", 23 "logs:PutLogEvents" 24 ], 25 "Resource": [ 26 "${app_log_group_arn}", 27 "${ecs_log_group_arn}" 28 ] 29 } 30 ] 31 }