Explicitly allow tagging of ECS resources

This permission will be required for tagging ECS resources beginning 29 March 2024.
polytomic · Mar 5, 2024 · c60e700 · c60e700
1 parent 67f70ee
commit c60e700
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/terraform/modules/ecs/README.md b/terraform/modules/ecs/README.md
@@ -191,9 +191,9 @@ module "polytomic-ecs" {
 
 | Name | Version |
 |------|---------|
-| <a name="provider_aws"></a> [aws](#provider\_aws) | 4.22.0 |
-| <a name="provider_null"></a> [null](#provider\_null) | 3.1.1 |
-| <a name="provider_random"></a> [random](#provider\_random) | 3.3.2 |
+| <a name="provider_aws"></a> [aws](#provider\_aws) | 5.27.0 |
+| <a name="provider_null"></a> [null](#provider\_null) | 3.2.2 |
+| <a name="provider_random"></a> [random](#provider\_random) | 3.5.1 |
 
 ## Resources
 

diff --git a/terraform/modules/ecs/iam.tf b/terraform/modules/ecs/iam.tf
@@ -31,6 +31,7 @@ data "aws_iam_policy_document" "polytomic_task" {
       "ecs:StartTask",
       "ecs:StopTask",
       "ecs:RunTask",
+      "ecs:TagResource",
       "tag:GetResources",
       "tag:GetTagKeys",
       "tag:GetTagValues",
@@ -123,7 +124,8 @@ data "aws_iam_policy_document" "polytomic_stats_reporter" {
 
   statement {
     actions = [
-      "ecs:RunTask"
+      "ecs:RunTask",
+      "ecs:TagResource",
     ]
     resources = [
       "${aws_ecs_task_definition.stats_reporter[0].arn}"