docker-ecs-permission

{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Effect": "Allow",
          "Action": [
              "ecs:ListAccountSettings",
              "ec2:DescribeVpcs",
              "ec2:DescribeSubnets",
              "cloudformation:CreateStack",
              "cloudformation:DescribeStacks",
              "cloudformation:DescribeStackEvents",
              "cloudformation:DeleteStack",
              "cloudformation:ListStackResources",
              "iam:CreateRole",
              "cloudformation:CreateChangeSet",
              "elasticloadbalancing:CreateRule",
              "elasticloadbalancing:CreateLoadBalancer",
              "elasticloadbalancing:CreateListener",
              "elasticloadbalancing:CreateTargetGroup",
              "ec2:CreateSecurityGroup",
              "ec2:DescribeSecurityGroups",
              "iam:DetachRolePolicy",
              "iam:DeleteRole",
              "elasticloadbalancing:DeleteListener",
              "elasticloadbalancing:DeleteLoadBalancer",
              "elasticloadbalancing:DeleteRule",
              "elasticloadbalancing:DeleteTargetGroup",
              "elasticloadbalancing:DescribeListeners",
              "elasticloadbalancing:DescribeLoadBalancers",
              "elasticloadbalancing:DescribeRules",
              "elasticloadbalancing:DescribeTargetGroups",
              "ec2:DeleteSecurityGroup",
              "elasticloadbalancing:AddTags",
              "route53:CreateHostedZone",
              "route53:DeleteHostedZone",
              "route53:GetHealthCheck",
              "route53:GetHostedZone",
              "route53:ListHostedZonesByName",
              "servicediscovery:CreatePrivateDnsNamespace",
              "servicediscovery:CreateService",
              "servicediscovery:DeleteService",
              "servicediscovery:GetNamespace",
              "servicediscovery:GetOperation",
              "servicediscovery:GetService",
              "servicediscovery:ListNamespaces",
              "servicediscovery:ListServices",
              "servicediscovery:UpdateService",
              "iam:AttachRolePolicy",
              "ecs:CreateCluster",
              "ecs:CreateService",
              "logs:CreateLogGroup",
              "logs:DescribeLogGroups",
              "logs:FilterLogEvents",
              "logs:DeleteLogGroup",
              "servicediscovery:RegisterInstance",
              "servicediscovery:DeregisterInstance",
              "servicediscovery:DiscoverInstances",
              "servicediscovery:Get*",
              "servicediscovery:List*",
              "sns:ListTopics"
          ],
          "Resource": "*"
      }
  ]
}