Merge pull request #24 from codeguru42/7-cleanup-ecr

7 cleanup ecr

Author: codeguru42

cloud-formation/ecr.yaml

@@ -7,6 +7,24 @@ Resources:
         EncryptionType: AES256
       ImageScanningConfiguration:
         ScanOnPush: true
+      LifecyclePolicy:
+        LifecyclePolicyText: |
+          {
+            "rules": [
+              {
+                "rulePriority": 1,
+                "description": "Keep newest",
+                "selection": {
+                  "tagStatus": "any",
+                  "countType": "imageCountMoreThan",
+                  "countNumber": 5
+                },
+                "action": {
+                  "type": "expire"
+                }
+              }
+            ]
+          }
 
 Outputs:
   GoCaptureRepository:

cloud-formation/github-role.yaml

@@ -72,8 +72,12 @@ Resources:
                   ecr:DescribeRepositories,
                   ecr:GetAuthorizationToken,
                   ecr:GetDownloadUrlForLayer,
+                  ecr:GetRepositoryPolicy,
                   ecr:InitiateLayerUpload,
+                  ecr:ListTagsForResource,
                   ecr:PutImage,
+                  ecr:PutImageScanningConfiguration,
+                  ecr:PutLifecyclePolicy,
                   ecr:UploadLayerPart
                 ],
                 "Resource": "*"