Updated policy

bcgov · Jul 29, 2024 · 7b7ddc4 · 7b7ddc4
1 parent ad3f988
commit 7b7ddc4
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/infrastructure/cloud/modules/security/iam.tf b/infrastructure/cloud/modules/security/iam.tf
@@ -27,9 +27,10 @@ resource "aws_iam_role_policy" "ecs_web_task_execution_policy" {
         Action = [
           "ecr:BatchGetImage",
           "ecr:GetDownloadUrlForLayer",
-          "ecr:GetAuthorizationToken"
+          "ecr:GetAuthorizationToken",
+          "ecr:BatchCheckLayerAvailability"
         ]
-        Resource = var.ecs_web_task_definition_arn
+        Resource = "*"
       }
     ]
   })