github.com/spirius/terraform@v0.10.0-beta2.0.20170714185654-87b2c0cf8fea/examples/aws-ecs-alb/instance-profile-policy.json (about) 1 { 2 "Version": "2012-10-17", 3 "Statement": [ 4 { 5 "Sid": "ecsInstanceRole", 6 "Effect": "Allow", 7 "Action": [ 8 "ecs:DeregisterContainerInstance", 9 "ecs:DiscoverPollEndpoint", 10 "ecs:Poll", 11 "ecs:RegisterContainerInstance", 12 "ecs:Submit*", 13 "ecs:StartTelemetrySession" 14 ], 15 "Resource": [ 16 "*" 17 ] 18 }, 19 { 20 "Sid": "allowLoggingToCloudWatch", 21 "Effect": "Allow", 22 "Action": [ 23 "logs:CreateLogStream", 24 "logs:PutLogEvents" 25 ], 26 "Resource": [ 27 "${app_log_group_arn}", 28 "${ecs_log_group_arn}" 29 ] 30 } 31 ] 32 }