ECS: TagResource [Update your IAM policies by March 29, 2024]

Question

I received a notice asking me to update my IAM policy by February 29, 2024.
Please let me know what policies do I need to update for my account? 
How do I know that the user policy has been updated?

Answer

You can run list-account-settings to view the current tagging authorization status. Use the effective-settings option to view the account level settings.
Command: *aws ecs list-account-settings --effective-settings*

This is for the creation of ECS Resources. 
Ex: For cluster creation the below Allow statement is needed to create:
“Statement”: [
{
“Sid”: “AllowClusterTagging”,
“Effect”: “Allow”,
“Action”: [
“ecs:TagResource”
],
“Resource”: “*”,
“Condition”: {
“StringEquals”: {
“ecs:CreateAction” : “CreateCluster”
}
}
}
]

March 29, 2024 - Tagging Authorization will be turned on for all AWS accounts. The account level setting will no longer be used and will be removed from the ECS Account Settings page in the AWS Console.

It also can be viewed in the customer health dashboard.

Ref: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#tag-resources-setting

ECS: TagResource [Update your IAM policies by March 29, 2024]

Relevant content