Add ImageScan actions to iam roles (#39)

cloudposse · Dec 5, 2019 · 1ec45f0 · 1ec45f0
1 parent cc831ee
commit 1ec45f0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -89,6 +89,7 @@ data "aws_iam_policy_document" "resource_readonly_access" {
       "ecr:ListImages",
       "ecr:DescribeImages",
       "ecr:BatchGetImage",
+      "ecr:DescribeImageScanFindings",
     ]
   }
 }
@@ -119,6 +120,8 @@ data "aws_iam_policy_document" "resource_full_access" {
       "ecr:ListImages",
       "ecr:DescribeImages",
       "ecr:BatchGetImage",
+      "ecr:DescribeImageScanFindings",
+      "ecr:StartImageScan",
     ]
   }
 }