Merge remote-tracking branch 'origin/main'

dbl-works · Jul 15, 2021 · 65dff61 · 65dff61
2 parents f448ec9 + 1f519f3
commit 65dff61
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,7 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 This project does not follow SemVer, since modules are independent of each other; thus, SemVer does not make sense. Changes are grouped per module.
 
 ## [Unreleased]
-
+### ECS
+- Allow describe service & task for `ecs-task-execution-policy` , [#21](https://github.com/dbl-works/terraform/pull/21)
 
 ## [v2021.07.13] - 2021-07-13
 ### Added

diff --git a/ecs/execution-role.tf b/ecs/execution-role.tf
@@ -49,6 +49,14 @@ resource "aws_iam_role_policy" "ecs-task-execution-policy" {
           "ssmmessages:OpenDataChannel"
         ],
         "Resource" : "*"
+      },
+      {
+        "Effect" : "Allow",
+        "Action" : [
+          "ecs:DescribeServices",
+          "ecs:DescribeTasks"
+        ],
+        "Resource" : "*"
       }
     ]
   })