docs: update README.md

aws · Dec 21, 2023 · 0db25e2 · 0db25e2
1 parent d170abc
commit 0db25e2
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 25 deletions.
diff --git a/...ting/framework-integ/test/aws-ecs-patterns/test/ec2/integ.queue-processing-ecs-service.ts b/...ting/framework-integ/test/aws-ecs-patterns/test/ec2/integ.queue-processing-ecs-service.ts
diff --git a/packages/aws-cdk-lib/aws-ecs/README.md b/packages/aws-cdk-lib/aws-ecs/README.md
@@ -186,6 +186,23 @@ const capacityProvider = new ecs.AsgCapacityProvider(this, 'AsgCapacityProvider'
 cluster.addAsgCapacityProvider(capacityProvider);
 ```
 
+The following code retrieve the Amazon Resource Names (ARNs) of tasks that are a part of a specified ECS cluster.
+It's useful when you want to grant permissions to a task to access other AWS resources.
+
+```typescript
+declare cluster: Cluster;
+declare taskDefinition: TaskDefinition;
+const taskARNs = cluster.arnForTasks('*'); // arn:aws:ecs:<region>:<regionId>:task/<clusterName>/*
+
+// Grant the task permission to access other AWS resources
+taskDefinition.addToTaskRolePolicy(
+  new iam.PolicyStatement({
+    actions: ['ecs:UpdateTaskProtection'],
+    resources: [taskARNs],
+  })
+)
+```
+
 
 ### Bottlerocket
 
@@ -1601,3 +1618,5 @@ taskDefinition.addContainer('TheContainer', {
   }],
 });
 ```
+
+## Retrieve the task ARN which