github.com/nathanielks/terraform@v0.6.1-0.20170509030759-13e1a62319dc/examples/aws-ecs-alb/instance-profile-policy.json (about)

     1  {
     2    "Version": "2012-10-17",
     3    "Statement": [
     4      {
     5        "Sid": "ecsInstanceRole",
     6        "Effect": "Allow",
     7        "Action": [
     8          "ecs:DeregisterContainerInstance",
     9          "ecs:DiscoverPollEndpoint",
    10          "ecs:Poll",
    11          "ecs:RegisterContainerInstance",
    12          "ecs:Submit*"
    13        ],
    14        "Resource": [
    15          "*"
    16        ]
    17      },
    18      {
    19        "Sid": "allowLoggingToCloudWatch",
    20        "Effect": "Allow",
    21        "Action": [
    22          "logs:CreateLogStream",
    23          "logs:PutLogEvents"
    24        ],
    25        "Resource": [
    26          "${app_log_group_arn}",
    27          "${ecs_log_group_arn}"
    28        ]
    29      }
    30    ]
    31  }