I want to restrict which IAM user or role can call RegisterTaskDefinition for specific task definition but looks like task definition does not support resource type in IAM policy. It only support tag in condition key.
How can I restrict which IAM user or role can call RegisterTaskDefinition?
- https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RegisterTaskDefinition.html
- https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticcontainerservice.html
Thanks.