Ensure the ecr action list is properly aligned between role-permissions and ECR policy (#242)

mrstevegross-tecton · web-flow · commit 24bba2c4d6a4 · 2025-08-04T10:03:11.000-04:00
ref FOUND-484
diff --git a/deployment/roles.tf b/deployment/roles.tf
@@ -75,7 +75,6 @@ data "aws_iam_policy_document" "cross_account_role_ecr" {
     effect = "Allow"
     actions = [
       "ecr:BatchCheckLayerAvailability",
-      "ecr:BatchGetImage",
       "ecr:CompleteLayerUpload",
       "ecr:GetAuthorizationToken",
       "ecr:InitiateLayerUpload",
