Add Nag Suppressions on role level

umccr · Nov 1, 2024 · 8e9573a · 8e9573a
1 parent 89b6b41
commit 8e9573a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/workload/components/ora-file-decompression-fq-pair-sfn/index.ts b/lib/workload/components/ora-file-decompression-fq-pair-sfn/index.ts
@@ -65,7 +65,7 @@ export class OraDecompressionConstruct extends Construct {
     //   "Effect": "Allow",
     //   "Resource": "*"
     // },
-    NagSuppressions.addResourceSuppressions(taskDefinition, [
+    NagSuppressions.addResourceSuppressions(<iam.Role>taskDefinition.executionRole, [
       {
         id: 'AwsSolutions-IAM5',
         reason: 'Fargate has GetAuthorizationToken permission on all resources by default',