diff --git a/infrastructure/src/constructs/oidc-provider.ts b/infrastructure/src/constructs/oidc-provider.ts
index 55adae2..d028817 100644
--- a/infrastructure/src/constructs/oidc-provider.ts
+++ b/infrastructure/src/constructs/oidc-provider.ts
@@ -70,6 +70,8 @@ export default class OIDCProvider extends Construct {
             new PolicyStatement({
               sid: 'CdkEcrPermissions',
               actions: [
+                'ecr:DescribeImages',
+                'ecr:DescribeRepositories',
                 'ecr:CompleteLayerUpload',
                 'ecr:UploadLayerPart',
                 'ecr:InitiateLayerUpload',
diff --git a/infrastructure/src/images/Dockerfile.base b/infrastructure/src/images/Dockerfile.base
index 12e7f20..55fc8e5 100644
--- a/infrastructure/src/images/Dockerfile.base
+++ b/infrastructure/src/images/Dockerfile.base
@@ -2,4 +2,4 @@ FROM node:20-alpine3.19 AS setup
 RUN apk add --no-cache python3 make g++
 RUN apk add --no-cache jq
 RUN apk add --no-cache git
-RUN apk add --no-cache aws-cli
+RUN apk add --no-cache aws-cli
\ No newline at end of file