| ecs:CreateCluster | Admin |
| ecs:CreateService | Admin |
| ecs:DeleteAccountSetting | Admin |
| ecs:DeleteAttributes | Admin |
| ecs:DeleteCluster | Admin |
| ecs:DeleteService | Admin |
| ecs:DeregisterContainerInstance | Admin |
| ecs:DeregisterTaskDefinition | Admin |
| ecs:DiscoverPollEndpoint | Admin |
| ecs:ExecuteCommand | Admin |
| ecs:Poll | Admin |
| ecs:PutAccountSetting | Admin |
| ecs:PutAccountSettingDefault | Admin |
| ecs:PutAttributes | Admin |
| ecs:RegisterContainerInstance | Admin |
| ecs:RegisterTaskDefinition | Admin |
| ecs:StartTelemetrySession | Admin |
| ecs:SubmitContainerStateChange | Admin |
| ecs:SubmitTaskStateChange | Admin |
| ecs:UpdateContainerAgent | Admin |
| ecs:UpdateContainerInstancesState | Admin |
| ecs:UpdateService | Admin |
| ecs:DeregisterContainerInstance | Admin |
| ecs:RunTask | Operator |
| ecs:StartTask | Operator |
| ecs:StopTask | Operator |
| ecs:TagResource | Operator |
| ecs:UntagResource | Operator |
| ecs:DescribeClusters | Metadata |
| ecs:DescribeContainerInstances | Metadata |
| ecs:DescribeServices | Metadata |
| ecs:DescribeTaskDefinition | Metadata |
| ecs:DescribeTasks | Metadata |
| ecs:ListAccountSettings | Metadata |
| ecs:ListAttributes | Metadata |
| ecs:ListClusters | Metadata |
| ecs:ListContainerInstances | Metadata |
| ecs:ListServices | Metadata |
| ecs:ListTagsForResource | Metadata |
| ecs:ListTaskDefinitionFamilies | Metadata |
| ecs:ListTaskDefinitions | Metadata |
| ecs:ListTasks | Metadata |
