github.com/spirius/terraform@v0.10.0-beta2.0.20170714185654-87b2c0cf8fea/examples/aws-ecs-alb/instance-profile-policy.json (about)

     1  {
     2    "Version": "2012-10-17",
     3    "Statement": [
     4      {
     5        "Sid": "ecsInstanceRole",
     6        "Effect": "Allow",
     7        "Action": [
     8          "ecs:DeregisterContainerInstance",
     9          "ecs:DiscoverPollEndpoint",
    10          "ecs:Poll",
    11          "ecs:RegisterContainerInstance",
    12          "ecs:Submit*",
    13          "ecs:StartTelemetrySession"
    14        ],
    15        "Resource": [
    16          "*"
    17        ]
    18      },
    19      {
    20        "Sid": "allowLoggingToCloudWatch",
    21        "Effect": "Allow",
    22        "Action": [
    23          "logs:CreateLogStream",
    24          "logs:PutLogEvents"
    25        ],
    26        "Resource": [
    27          "${app_log_group_arn}",
    28          "${ecs_log_group_arn}"
    29        ]
    30      }
    31    ]
    32  }