fix for CKV_AWS_355

kunduso · Nov 27, 2024 · 9700426 · 9700426
1 parent 7bc2550
commit 9700426
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/deploy/ecs_iam_roles.tf b/deploy/ecs_iam_roles.tf
@@ -92,7 +92,7 @@ resource "aws_iam_policy" "ecr_access_policy" {
           "ecr:GetDownloadUrlForLayer",
           "ecr:BatchGetImage"
         ]
-        Resource = "*"
+        Resource = "arn:aws:ecr:${var.region}:${local.ecr_hosting_account}:repository/*"
       },
       {
         Effect = "Allow"