fix: Allow to send task definition with tags (#16)

Selleo · Dec 17, 2024 · a92a78e · a92a78e
1 parent 779ae5e
commit a92a78e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/modules/ecs-service/main.tf b/modules/ecs-service/main.tf
@@ -446,6 +446,16 @@ data "aws_iam_policy_document" "update_service" {
 
     resources = [aws_ecs_service.this.id]
   }
+
+  statement {
+    actions = [
+      "ecs:TagResource",
+    ]
+
+    resources = [
+      "arn:aws:ecs:eu-central-1:${data.aws_caller_identity.this.account_id}:task-definition/${random_id.prefix.hex}:*"
+    ]
+  }
 }
 
 # policy for registering new task (IAM needs to pass role to task/execution role)