Amazon web services ECS:容器的TaskExecutionRole

Amazon web services ECS:容器的TaskExecutionRole,amazon-web-services,amazon-iam,amazon-ecs,Amazon Web Services,Amazon Iam,Amazon Ecs,我想通过CloudFormation创建一个Fargate类型的ECS任务,但上传此清单时: Resources: UITaskDefinition: Type: AWS::ECS::TaskDefinition Properties: Family: "ui-task" NetworkMode: "awsvpc" Cpu: "256" Memory: "0.5GB" RequiresCompatibilities:

我想通过CloudFormation创建一个
Fargate
类型的ECS任务,但上传此清单时:

Resources:
  UITaskDefinition:
    Type: AWS::ECS::TaskDefinition
    Properties:
      Family: "ui-task"
      NetworkMode: "awsvpc"
      Cpu: "256"
      Memory: "0.5GB"
      RequiresCompatibilities: 
        - "FARGATE"
      ContainerDefinitions:
        -
          Name: !Ref UIContainerName
          Image: "298984380.dkr.ecr.eu-west-1.amazonaws.com/myregistry/ui:test"
          Essential: "true"
          PortMappings:
          -
            ContainerPort: 80
            HostPort: 80
我得到以下错误

Fargate要求任务定义具有执行角色ARN以支持ECR映像

但是,当我试图通过AWS控制台创建角色时,系统会提示我以下要分配角色的服务列表

我应该选择哪种服务?弹性集装箱服务


我认为这个角色是特定于容器的

是的,您可以为受信任的实体选择弹性容器服务。有关执行角色的详细说明和信息,请参阅