The ECS instance you created is your own resource. By default, you have full operation permissions on your resources, and can use all APIs described in this document to perform operations on your resources.
However, in scenarios where a master account has a subaccount, you cannot use an unauthorized subaccount to perform operations on resources of the master account. You need to grant the permission to the subaccount to perform operations on resources of the master account through RAM authorization.
Skip this section if you do not need to grant an account the permission to access ECS instance resources in another account. Skipping this section does not affect your understanding and use of the remaining parts in this document.