Install > User Privilege

User Privilege

Create an Identity and Access Management (IAM) role with following permissions:

Permission Purpose
AmazonEC2ReadOnlyAccess To discover EC2 instances.
CloudWatchReadOnlyAccess To monitor EC2 instances through CloudWatch.
IAMReadOnlyAccess To fetch the cloud account ID.
  • ecs:DeregisterContainerInstance
  • ecs:DeregisterTaskDefinition
  • ecs:DescribeClusters
  • ecs:DescribeContainerInstances
  • ecs:DescribeServices
  • ecs:DescribeTaskDefinition
  • ecs:DescribeTasks
  • ecs:DiscoverPollEndpoint
  • ecs:ListClusters
  • ecs:ListContainerInstances
  • ecs:ListServices
  • ecs:ListTaskDefinitionFamilies
  • ecs:ListTaskDefinitions
  • ecs:ListTasks
To discover ECS instances.