More IAM

2021-07-10 18:50:10 +00:00 · 2021-07-10 18:50:10 +00:00 · 39b47131ba
parent c7a74ad068
commit 39b47131ba
1 changed files with 14 additions and 0 deletions
--- a/tf/iam.tf
+++ b/tf/iam.tf
@ -19,9 +19,23 @@ data "aws_iam_policy_document" "deploy" {
    ]
  }

+  statement {
+    actions = [
+      "ecr:DescribeRegistry",
+    ]
+
+    resources = [
+      "*",
+    ]
+  }
+
  statement {
    actions = [
      "ecr:BatchGetImage",
+      "ecr:BatchCheckLayerAvailability",
+      "ecr:DescribeImages",
+      "ecr:DescribeRepositories",
+      "ecr:GetDownloadUrlForLayer",
      "ecr:ListImages",
    ]