Support ecr pull

NamseEnt · Dec 3, 2023 · 2678126 · 2678126
1 parent 80acf29
commit 2678126
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/oioi/cdk/lib/index.ts b/oioi/cdk/lib/index.ts
@@ -215,13 +215,13 @@ docker login --username AWS --password-stdin public.ecr.aws
                                     actions: [
                                         "ecr-public:GetAuthorizationToken",
                                         "ecr:GetAuthorizationToken",
+                                        "ecr:BatchGetImage",
+                                        "ecr:BatchCheckLayerAvailability",
+                                        "ecr:GetDownloadUrlForLayer",
+                                        "sts:GetServiceBearerToken",
                                     ],
                                     resources: ["*"],
                                 }),
-                                new cdk.aws_iam.PolicyStatement({
-                                    actions: ["sts:GetServiceBearerToken"],
-                                    resources: ["*"],
-                                }),
                             ],
                         }),
                     },