Add ecs:TagResource to Augury worker relay role

Closes PRX/internal#1083
PRX · Feb 6, 2024 · 5a48c03 · 5a48c03
1 parent c0ff605
commit 5a48c03
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/spire/templates/apps/augury.yml b/spire/templates/apps/augury.yml
@@ -1263,11 +1263,13 @@ Resources:
             - Action: ecs:ListTasks
               Effect: Allow
               Resource: "*"
-            - Action: ecs:RunTask
+            - Action:
+                - ecs:RunTask
+                - ecs:TagResource
               Effect: Allow
               Resource: !Ref SlowWorkerTaskDefinition
-            - Effect: Allow
-              Action: iam:PassRole
+            - Action: iam:PassRole
+              Effect: Allow
               Resource:
                 - !GetAtt ExecutionRole.Arn
                 - !GetAtt TaskRole.Arn