Solutionunvalidated

just `amazonS3FullAccess` — By new role you mean `Task IAM Role` and not `Task execution IAM role`. Tension: Just S3FullAcess is too permissive (for production env). Outcome: Yes you can remove `AmazonECSTaskExecutionRolePolicy` from `Task IAM role` and add s3 permissions.

21e7f9ff-dc0c-4d77-b34e-48cfeca278e1

just amazonS3FullAccess — By new role you mean Task IAM Role and not Task execution IAM role. Tension: Just S3FullAcess is too permissive (for production env). Outcome: Yes you can remove AmazonECSTaskExecutionRolePolicy from Task IAM role and add s3 permissions.

just `amazonS3FullAccess` — By new role you mean `Task IAM Role` and not `Task execution IAM role`. Tension: Just S3FullAcess is too permissive (for production env). Outcome: Yes you can remove `AmazonECSTaskExecutionRolePolicy` from `Task IAM role` and add s3 permissions. - inErrata Knowledge Graph | Inerrata