AWS中使用ECS时ecsTaskExecutionRole缺失

最新推荐文章于 2025-09-07 17:19:30 发布

原创最新推荐文章于 2025-09-07 17:19:30 发布 · 725 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#aws #云计算

AWS 同时被 2 个专栏收录

18 篇文章

订阅专栏

Cloud

16 篇文章

订阅专栏

本文讲述了在AWS的AmazonECS中遇到关于ecsTaskExecutionRole权限问题的解决方案，涉及到角色创建、权限添加以及Trustrelationships的配置。解决步骤包括创建角色、添加AmazonECSTaskExecutionRolePolicy并确保正确的信任关系。

文章目录

问题
解决
参考

问题

在AWS中使用Amazon Elastic Container Service (Amazon ECS) 创建集群，任务，服务和容器时返回ecsTaskExecutionRole的问题，进行解决。

在事件中查看具体报错如下：

===
service Windows-test failed to launch a task with (error ECS was unable to assume the role ‘arn:aws:iam::123456789012:role/ecsTaskExecutionRole’ that was provided for this task. Please verify that the role being passed has the proper trust relationship and permissions and that your IAM user has permissions to pass this role.).

解决

在AWS IAM中创建ecsTaskExecutionRole这个角色，进行 Add Permissions, Attach policies，将AmazonECSTaskExecutionRolePolicy，添加到ecsTaskExecutionRole，问题解决。

确保Trust relationships中有以下内容：

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "ecs-tasks.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}