Merge pull request #329 from Sage-Bionetworks-Workflows/bwmac/ibcdpe-…

…1000/adds-EcsTaskExecutionRole [IBCDPE-1000] Adds EcsTaskExecutionRole to task definition template
Sage-Bionetworks-Workflows · Jul 2, 2024 · 3d3537f · 3d3537f
2 parents a2bd18f + 04f96bd
commit 3d3537f
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/templates/nextflow-ecs-task-definition.j2 b/templates/nextflow-ecs-task-definition.j2
@@ -180,6 +180,21 @@ Resources:
       LogGroupName: '/aws/ecs/task/nf-tower'
       RetentionInDays: 30
 
+  EcsTaskExecutionRole:
+    Type: AWS::IAM::Role
+    Properties:
+      RoleName: EcsTaskExecutionRole
+      AssumeRolePolicyDocument:
+        Version:  '2012-10-17'
+        Statement:
+          - Effect: Allow
+            Principal:
+              Service: ecs-tasks.amazonaws.com
+            Action: sts:AssumeRole
+      ManagedPolicyArns:
+        - arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy
+        - arn:aws:iam::aws:policy/SecretsManagerReadWrite
+
   TowerTask:
     Type: AWS::ECS::TaskDefinition
     Properties: