From f5ed0fedeb5033c00cdbccf46f46f5c87e267996 Mon Sep 17 00:00:00 2001
From: Mahmoud Ismail <mahmoud@logicalclocks.com>
Date: Tue, 8 Nov 2022 16:17:16 +0100
Subject: [PATCH] [CLOUD-33] Add ecr:TagResource permission to instance profile
 (#221)

---
 CHANGELOG.md                                           | 1 +
 hopsworksai/data_source_aws_instance_profile_policy.go | 1 +
 2 files changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5417d1c..df1902b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,7 @@ BREAKING CHANGES:
 BUG FIXES:
 
 ENHANCEMENTS:
+* datasource/aws_instance_profile_policy: Add ecr:TagResource permission
 
 FEATURES:
 
diff --git a/hopsworksai/data_source_aws_instance_profile_policy.go b/hopsworksai/data_source_aws_instance_profile_policy.go
index c7bf8ee..6b6bd24 100644
--- a/hopsworksai/data_source_aws_instance_profile_policy.go
+++ b/hopsworksai/data_source_aws_instance_profile_policy.go
@@ -171,6 +171,7 @@ func awsEKSECRPermissions(allowDescribeEKSResource interface{}, allowPushandPull
 				"ecr:BatchDeleteImage",
 				"ecr:GetLifecyclePolicy",
 				"ecr:PutLifecyclePolicy",
+				"ecr:TagResource",
 			},
 			Resources: allowPushandPullImagesResource,
 		}, {