Policy: AmazonECSServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonECSServiceRolePolicy Allowed Actions Actions Services autoscaling:CompleteLifecycleAction autoscaling autoscaling:DeleteLifecycleHook autoscaling autoscaling:DeletePolicy autoscaling autoscaling:Describe* autoscaling autoscaling:PutLifecycleHook autoscaling autoscaling:PutScalingPolicy autoscaling autoscaling:RecordLifecycleActionHeartbeat autoscaling autoscaling:SetInstanceProtection autoscaling autoscaling:UpdateAutoScalingGroup autoscaling autoscaling-plans:CreateScalingPlan autoscaling-plans autoscaling-plans:DeleteScalingPlan autoscaling-plans autoscaling-plans:DescribeScalingPlanResources autoscaling-plans autoscaling-plans:DescribeScalingPlans autoscaling-plans cloudwatch:DeleteAlarms cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:PutMetricAlarm cloudwatch ec2:AttachNetworkInterface ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteNetworkInterfacePermission ec2 ec2:Describe* ec2 ec2:DetachNetworkInterface ec2 elasticloadbalancing:DeregisterInstancesFromLoadBalancer elasticloadbalancing elasticloadbalancing:DeregisterTargets elasticloadbalancing elasticloadbalancing:Describe* elasticloadbalancing elasticloadbalancing:RegisterInstancesWithLoadBalancer elasticloadbalancing elasticloadbalancing:RegisterTargets elasticloadbalancing events:DescribeRule events events:ListTargetsByRule events events:PutRule events events:PutTargets events logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogGroups logs logs:DescribeLogStreams logs logs:PutLogEvents logs logs:PutRetentionPolicy logs route53:ChangeResourceRecordSets route53 route53:CreateHealthCheck route53 route53:DeleteHealthCheck route53 route53:Get* route53 route53:List* route53 route53:UpdateHealthCheck route53 servicediscovery:CreateHttpNamespace servicediscovery servicediscovery:CreateService servicediscovery servicediscovery:DeleteService servicediscovery servicediscovery:DeregisterInstance servicediscovery servicediscovery:DiscoverInstances servicediscovery servicediscovery:DiscoverInstancesRevision servicediscovery servicediscovery:Get* servicediscovery servicediscovery:List* servicediscovery servicediscovery:RegisterInstance servicediscovery servicediscovery:TagResource servicediscovery servicediscovery:UpdateInstanceCustomHealthStatus servicediscovery ssm:DescribeSessions ssm ssm:StartSession ssm