Clarifying behavior of ECS:listTask()


Does ECS:ListTasks fetch all tasks and only returns those who match a filter of the cluster parameter, or only queries the provided cluster?

I am testing restricting resource access for an iam role for a tool that works with ECS to specific clusters. In testing I am finding that even if I specify the cluster parameter in a ECS:ListTasks call, an error occurs with permissions indicating the role doesn't have access to ListTasks on resources: *. This behavior is the same if we use the cluster name or ARN.

1 Answer


Can you share me below information?

  1. the result of a below command
$ aws sts get-caller-identity
    "UserId": "***",
    "Account": "***",
    "Arn": "arn:aws:iam::***:user/***"
  1. a policy to allow ListTasks permission for above IAM principal (e.g., IAM User, IAM Role, ... etc.)

  2. Share me ListTasks commands you executed


$ aws ecs list-tasks --cluster <CLUSTER_NAME>

Thank you.

Myungsup Kwak

profile pictureAWS
answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions