chore: add iam permission (#7)

ashleyjtaylor · Mar 9, 2024 · 91e7736 · 91e7736
1 parent 972aa53
commit 91e7736
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/infrastructure/src/constructs/oidc-provider.ts b/infrastructure/src/constructs/oidc-provider.ts
@@ -70,6 +70,8 @@ export default class OIDCProvider extends Construct {
             new PolicyStatement({
               sid: 'CdkEcrPermissions',
               actions: [
+                'ecr:DescribeImages',
+                'ecr:DescribeRepositories',
                 'ecr:CompleteLayerUpload',
                 'ecr:UploadLayerPart',
                 'ecr:InitiateLayerUpload',

diff --git a/infrastructure/src/images/Dockerfile.base b/infrastructure/src/images/Dockerfile.base
@@ -2,4 +2,4 @@ FROM node:20-alpine3.19 AS setup
 RUN apk add --no-cache python3 make g++
 RUN apk add --no-cache jq
 RUN apk add --no-cache git
-RUN apk add --no-cache aws-cli
+RUN apk add --no-cache aws-cli