aws AWS What's New ·

Amazon ECS expands IAM condition key support for RunTask and StartTask APIs

securityawsgaarchitectaws-ecsaws-iam
feature

Amazon ECS now supports `ecs:task-cpu` and `ecs:task-memory` IAM condition keys for its `RunTask` and `StartTask` APIs. This expansion allows administrators to enforce consistent CPU and memory limits across all methods of launching ECS tasks. It helps prevent unexpected cost overruns and ensures workloads adhere to resource policies. This enhancement provides a unified mechanism for controlling resource allocation and is available in all AWS regions at no additional cost.

Features (1)
  • Expanded IAM condition key support for ECS RunTask and StartTask APIs

    Amazon Elastic Container Service (Amazon ECS) now supports the `ecs:task-cpu` and `ecs:task-memory` IAM condition keys for the RunTask and StartTask APIs. Previously, these keys were only available for RegisterTaskDefinition, CreateService, and UpdateService APIs. This provides administrators with a single, unified mechanism to control resource allocation across their ECS environments.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/09/amazon-ecs-expands-condition-key-support/

Related releases