ecstaskexecutionpolicy.json

{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Sid": "VisualEditor0",
          "Effect": "Allow",
          "Action": [
              "secretsmanager:Describe*",
              "secretsmanager:List*",
              "secretsmanager:Get*"
          ],
          "Resource": "*",
          "Condition": {
              "StringEquals": {
                  "secretsmanager:ResourceTag/APP": "devtest",
                  "secretsmanager:ResourceTag/ENV": "Non-Prod"
              }
          }
      },
      {
          "Sid": "VisualEditor1",
          "Effect": "Allow",
          "Action": [
              "logs:CreateLogStream",
              "ecr:GetDownloadUrlForLayer",
              "ecr:BatchGetImage",
              "ecr:GetAuthorizationToken",
              "logs:PutLogEvents",
              "ecr:BatchCheckLayerAvailability"
          ],
          "Resource": "*"
      },
      {
          "Sid": "VisualEditor2",
          "Effect": "Allow",
          "Action": [
              "s3:PutObject",
              "s3:GetObject",
              "s3:ListBucketVersions",
              "s3:CreateBucket",
              "s3:ListBucket",
              "s3:DeleteBucket"
          ],
          "Resource": "arn:aws:s3:::devtest-nonprod-*"
      }
  ]
}