fix for demo

CDCgov · Oct 3, 2024 · 4273a0a · 4273a0a
1 parent 88ebb93
commit 4273a0a
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/terraform/implementation/ecs/main.tf b/terraform/implementation/ecs/main.tf
@@ -18,7 +18,6 @@ module "ecs" {
   private_subnet_ids = flatten(module.vpc.private_subnets)
   vpc_id             = module.vpc.vpc_id
   region             = var.region
-  alb_internal       = false
 
   owner   = var.owner
   project = var.project
@@ -27,5 +26,6 @@ module "ecs" {
   # If intent is to pull from the phdi GHCR, set disable_ecr to true (default is false)
   # disable_ecr = true
   # If intent is to use the non-integrated viewer, set non_integrated_viewer to true (default is false)
-  # non_integrated_viewer = "true"
+  ecr_viewer_app_env = "test"
+  alb_internal       = false
 }
diff --git a/terraform/modules/ecs/_data.tf b/terraform/modules/ecs/_data.tf
@@ -18,6 +18,7 @@ data "aws_iam_policy_document" "ecr_viewer_s3" {
       "s3:PutObjectAcl",
       "s3:GetObject",
       "s3:GetObjectAcl",
+      "s3:ListBucket",
     ]
     resources = [
       aws_s3_bucket.ecr_viewer.arn,

diff --git a/terraform/modules/oidc/_data.tf b/terraform/modules/oidc/_data.tf
@@ -254,6 +254,7 @@ data "aws_iam_policy_document" "resource_tags_update_actions" {
       "iam:TagRole",
       "iam:TagPolicy",
       "iam:UntagPolicy",
+      "iam:CreatePolicyVersion",
       "logs:PutRetentionPolicy",
       "servicediscovery:TagResource",
     ]