fix: Add ECRReader permission role to beta scanner ecr (#134)

Add back both resource and data "ecr_reader" when using beta_scanning
sysdiglabs · Oct 17, 2022 · d3f4866 · d3f4866
1 parent 5e9b190
commit d3f4866
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/services/cloud-connector-ecs/permissions.tf b/modules/services/cloud-connector-ecs/permissions.tf
@@ -135,14 +135,14 @@ data "aws_iam_policy_document" "task_definition_reader" {
 
 # image scanning - ecr
 resource "aws_iam_role_policy" "ecr_reader" {
-  count  = local.deploy_image_scanning_with_codebuild ? 1 : 0
+  count  = local.deploy_image_scanning ? 1 : 0
   name   = "ECRReader"
   role   = local.ecs_task_role_id
   policy = data.aws_iam_policy_document.ecr_reader[0].json
 }
 
 data "aws_iam_policy_document" "ecr_reader" {
-  count = local.deploy_image_scanning_with_codebuild ? 1 : 0
+  count = local.deploy_image_scanning ? 1 : 0
   statement {
     effect = "Allow"
     actions = [