feat: add AmazonEC2ContainerRegistryReadOnly managed policy to EC2 instance role
This commit is contained in:
parent
e9a671c50b
commit
89eab230a3
1 changed files with 1 additions and 0 deletions
|
|
@ -52,6 +52,7 @@ export class AwsCdkStack extends cdk.Stack {
|
|||
],
|
||||
});
|
||||
role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'));
|
||||
role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonEC2ContainerRegistryReadOnly'));
|
||||
|
||||
// 3. Define the EC2 Instance (t4g.medium)
|
||||
const instance = new ec2.Instance(this, 'internalsInstance', {
|
||||
|
|
|
|||
Loading…
Reference in a new issue