cat << EOF > task-execution-assume-role.json
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "",
"Effect": "Allow",
"Principal": {
"Service": "ecs-tasks.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
EOF
Shell
복사
aws iam create-role --region ap-northeast-2 --role-name ecs-cli-role --assume-role-policy-document file://task-execution-assume-role.json
Shell
복사
aws iam attach-role-policy --region ap-northeast-2 --role-name ecs-cli-role --policy-arn arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy
aws iam attach-role-policy --region ap-northeast-2 --role-name ecs-cli-role --policy-arn arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess
aws iam attach-role-policy --region ap-northeast-2 --role-name ecs-cli-role --policy-arn arn:aws:iam::aws:policy/CloudWatchLogsFullAccess
Shell
복사