feat: add AmazonEC2ContainerRegistryReadOnly managed policy to EC2 instance role

This commit is contained in:
vickytechkey 2026-08-08 09:24:45 +05:30
parent e9a671c50b
commit 89eab230a3

View file

@ -52,6 +52,7 @@ export class AwsCdkStack extends cdk.Stack {
],
});
role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'));
role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonEC2ContainerRegistryReadOnly'));
// 3. Define the EC2 Instance (t4g.medium)
const instance = new ec2.Instance(this, 'internalsInstance', {