Skip to content

Allow ECS task roles during application releases - #10

Merged
ali509 merged 1 commit into
mainfrom
fix/ecs-task-passrole
Jul 17, 2026
Merged

Allow ECS task roles during application releases#10
ali509 merged 1 commit into
mainfrom
fix/ecs-task-passrole

Conversation

@ali509

@ali509 ali509 commented Jul 17, 2026

Copy link
Copy Markdown
Owner

Summary

  • separate iam:PassRole from CloudFormation role-management permissions
  • allow only environment-specific container roles
  • restrict role passing to ecs-tasks.amazonaws.com

Reason

The ECS release successfully published both images but could not register the updated task definition because CloudFormation truncated the generated application role name and the earlier ARN pattern did not match. Task registration also needs the container-foundation execution role.

Validation

  • cfn-lint passed
  • whitespace validation passed

@ali509
ali509 merged commit 9e6c2f8 into main Jul 17, 2026
1 check passed
@ali509
ali509 deleted the fix/ecs-task-passrole branch July 17, 2026 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant