Amazon ECS Extends IAM Condition Key Support to RunTask and StartTask APIs

IAM policies can now enforce CPU and memory resource limits uniformly across all ECS task launch methods.

By Victor Hale · Editorial pseudonym · 2026-09-10 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-09-10. Source published: 2026-09-10. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

Amazon Elastic Container Service updated its IAM permissions so that CPU and memory condition keys (ecs:task-cpu and ecs:task-memory) apply not only to task registration and service updates but also to RunTask and StartTask API calls. This allows administrators to set consistent resource constraints on tasks regardless of how they are launched, helping to control costs and enforce organizational usage policies more effectively.

Previously, these condition keys had limited applicability, which hindered uniform policy enforcement. The extended support is available in all Amazon ECS-supported AWS Regions without additional charges, enhancing the security and governance model for containerized workloads on AWS.

Source & further reading

Amazon ECS expands IAM condition key support for RunTask and StartTask APIs ↗

Source published 2026-09-10. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.