From 45309a13ec01d86d6d57ef0d1beebfed43427054 Mon Sep 17 00:00:00 2001
From: David Wilkie <dwilkie@gmail.com>
Date: Sat, 14 Sep 2024 14:16:00 +0700
Subject: [PATCH] WIP

---
 infrastructure/core/.terraform.lock.hcl | 1 +
 infrastructure/core/codebuild.tf        | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/infrastructure/core/.terraform.lock.hcl b/infrastructure/core/.terraform.lock.hcl
index 0c5d75e51..6d9e93939 100644
--- a/infrastructure/core/.terraform.lock.hcl
+++ b/infrastructure/core/.terraform.lock.hcl
@@ -5,6 +5,7 @@ provider "registry.terraform.io/hashicorp/aws" {
   version = "5.15.0"
   hashes = [
     "h1:3nyOhTsrJuoemeNyCu6rrhdWfJR0TCsq+9DZeErSd0g=",
+    "h1:CFUr3EXmKTr3G4Nl+Yxf24NnhKQQDCyeBG+SS4YFblE=",
     "zh:069d0037cd1f8791a27ec31a535ce47d02d4f220fe88f9c3caa8661c0a98892a",
     "zh:08c18e8f5f69736e86919e6c2a68c94f39f879511d51b2a8e58ad1776ee18854",
     "zh:41c9c95e225f72421fa4a1c3e5105f36b3b149cba1daf9bc88b0a993c1d19e07",
diff --git a/infrastructure/core/codebuild.tf b/infrastructure/core/codebuild.tf
index 612daa0d4..702041327 100644
--- a/infrastructure/core/codebuild.tf
+++ b/infrastructure/core/codebuild.tf
@@ -47,6 +47,11 @@ resource "aws_iam_role_policy_attachment" "codebuild_ecr_public" {
   policy_arn = "arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicPowerUser"
 }
 
+resource "aws_iam_role_policy_attachment" "codebuild_ecr" {
+  role       = aws_iam_role.codebuild.name
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser"
+}
+
 resource "aws_codebuild_project" "amd64" {
   name = "${local.codebuild_identifier}-amd64"