From 89eab230a3d463996a233ec9eb404b21649e8d23 Mon Sep 17 00:00:00 2001
From: vickytechkey <vichunice@gmail.com>
Date: Sat, 8 Aug 2026 09:24:45 +0530
Subject: [PATCH] feat: add AmazonEC2ContainerRegistryReadOnly managed policy
 to EC2 instance role

---
 aws_cdk/lib/aws_cdk-stack.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/aws_cdk/lib/aws_cdk-stack.ts b/aws_cdk/lib/aws_cdk-stack.ts
index 46194d8..0d52724 100644
--- a/aws_cdk/lib/aws_cdk-stack.ts
+++ b/aws_cdk/lib/aws_cdk-stack.ts
@@ -52,6 +52,7 @@ export class AwsCdkStack extends cdk.Stack {
       ],
     });
     role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'));
+    role.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonEC2ContainerRegistryReadOnly'));
 
     // 3. Define the EC2 Instance (t4g.medium)
     const instance = new ec2.Instance(this, 'internalsInstance', {