Trim permission to push

PRX · Sep 13, 2024 · 76c17fe · 76c17fe
1 parent cf415f0
commit 76c17fe
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/iam-roles/PRX-GHA-AccessRole/template.yml b/iam-roles/PRX-GHA-AccessRole/template.yml
@@ -174,14 +174,7 @@ Resources:
           Statement:
             - Effect: Allow
               Action:
-                - ecr:GetAuthorizationToken
                 - ecr:BatchCheckLayerAvailability
-                - ecr:GetDownloadUrlForLayer
-                - ecr:GetRepositoryPolicy
-                - ecr:DescribeRepositories
-                - ecr:ListImages
-                - ecr:DescribeImages
-                - ecr:BatchGetImage
                 - ecr:InitiateLayerUpload
                 - ecr:UploadLayerPart
                 - ecr:CompleteLayerUpload