ecr policy put permissions

CLJ2006 · CLJ2006 · commit 53e4fb543450 · 2026-01-14T10:21:59.000Z
diff --git a/ansible/roles/create-ecr-build-role/vars/main.yml b/ansible/roles/create-ecr-build-role/vars/main.yml
@@ -44,6 +44,7 @@ aws_ecs_policy:
         - "ecr:StartImageScan"
         - "ecr:StartLifecyclePolicyPreview"
         - "ecr:UploadLayerPart"
+        - "ecr:PutLifecyclePolicy"
       Resource: [
         "arn:aws:ecr:{{ aws_region }}:{{ aws_account_id }}:repository/{{ service_id }}_*"
       ]

Original file line number	Diff line number	Diff line change
`@@ -44,6 +44,7 @@ aws_ecs_policy:`
`44`	`44`	`- "ecr:StartImageScan"`
`45`	`45`	`- "ecr:StartLifecyclePolicyPreview"`
`46`	`46`	`- "ecr:UploadLayerPart"`
	`47`	`+ - "ecr:PutLifecyclePolicy"`
`47`	`48`	`Resource: [`
`48`	`49`	`"arn:aws:ecr:{{ aws_region }}:{{ aws_account_id }}:repository/{{ service_id }}_*"`
`49`	`50`	`]`