exr Pull remove

This commit is contained in:
Jun-te Kim 2026-02-09 16:15:14 +00:00
parent 11510fbe83
commit dd30d0d2a8

View file

@ -19,19 +19,19 @@ resource "aws_iam_role_policy_attachment" "basic_logs" {
policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
}
resource "aws_iam_role_policy" "ecr_pull" {
role = aws_iam_role.this.name
# resource "aws_iam_role_policy" "ecr_pull" {
# role = aws_iam_role.this.name
policy = jsonencode({
Version = "2012-10-17"
Statement = [{
Effect = "Allow"
Action = [
"ecr:GetAuthorizationToken",
"ecr:BatchGetImage",
"ecr:GetDownloadUrlForLayer"
]
Resource = "*"
}]
})
}
# policy = jsonencode({
# Version = "2012-10-17"
# Statement = [{
# Effect = "Allow"
# Action = [
# "ecr:GetAuthorizationToken",
# "ecr:BatchGetImage",
# "ecr:GetDownloadUrlForLayer"
# ]
# Resource = "*"
# }]
# })
# }