allow ecs:listTasks for ecs (#23)

* allow ecs:listTasks for ecs * update changelog
dbl-works · Jul 15, 2021 · 1cba4f6 · 1cba4f6
1 parent 2715285
commit 1cba4f6
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,7 +5,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 This project does not follow SemVer, since modules are independent of each other; thus, SemVer does not make sense. Changes are grouped per module.
 
-## [v2021.07.15.1]
+
+## [Unreleased]
+### ECS
+- allow `ecs:ListTasks` for `ecs-task-execution-policy`, [#23](https://github.com/dbl-works/terraform/pull/23/)
+
+
+## [v2021.07.15.1] - 2021-07-15
 ### Added
 - Grant access to managed RDS via IAM policy for the created database [#12](https://github.com/dbl-works/terraform/pull/12)
 

diff --git a/ecs/execution-role.tf b/ecs/execution-role.tf
@@ -54,7 +54,8 @@ resource "aws_iam_role_policy" "ecs-task-execution-policy" {
         "Effect" : "Allow",
         "Action" : [
           "ecs:DescribeServices",
-          "ecs:DescribeTasks"
+          "ecs:DescribeTasks",
+          "ecs:ListTasks",
         ],
         "Resource" : "*"
       }