Question

How to allow an IAM entity to delete the AWSServiceRoleForECS service-linked role?

Answer 1

Hi @Vimal,

Add the following statement to the permissions policy for the IAM entity that needs to delete a service-linked role:

{
    "Effect": "Allow",
    "Action": [
        "iam:DeleteServiceLinkedRole",
        "iam:GetServiceLinkedRoleDeletionStatus"
    ],
    "Resource": "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS*",
    "Condition": {"StringLike": {"iam:AWSServiceName": "ecs.amazonaws.com"}}
}