AWS stepfunction ECS 실행

stepfunction 에서 ecs 실행 시키려면 역할머신에 권한을 줘야한다.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ecs:RunTask"
            ],
            "Resource": [
                *
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "ecs:StopTask",
                "ecs:DescribeTasks"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "events:PutTargets",
                "events:PutRule",
                "events:DescribeRule"
            ],
            "Resource": [
                "arn:aws:events:{region}:{account id}:rule/StepFunctionsGetEventsForECSTaskRule"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "iam:PassRole"
            ],
            "Resource": [
                "arn:aws:iam::{account id}:role/ecsTaskExecutionRole"
            ]
        }
    ]
}

---

{
  "Comment": "ecs",
  "StartAt": "ecs",
  "States": {
    "ecs": {
      "Type": "Task",
      "Resource": "arn:aws:states:::ecs:runTask.sync",
      "Parameters": {
        "CapacityProviderStrategy": [
          {
            "CapacityProvider": "FARGATE_SPOT"
          }
        ],
        "Cluster": "{cluster name}",
        "TaskDefinition": "{task-definition arn}",
        "Overrides": {
          "ContainerOverrides": []
        },
        "NetworkConfiguration": {
          "AwsvpcConfiguration": {
            "Subnets": [],
            "SecurityGroups": [],
            "AssignPublicIp": "ENABLED"
          }
        }
      },
      "Next": "wait",
      "ResultPath": "$.result"
    },
...