Skip to content

Commit e980c46

Browse files
authored
PHP-100122: Update credentials scope for ECR repository access (#249)
Change credentials scope from WRITE_READ to READ_ONLY.
1 parent 012f50f commit e980c46

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

startupscript/butane/aws/docker-repositories.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@ function _get_ecr_login_password() {
126126

127127
# Get credentials from wb.sh in credential_process JSON format
128128
local credentials
129-
credentials="$(/home/core/wb.sh resource credentials --name "${ecr_repo_id}" --scope WRITE_READ --format json)" || {
129+
credentials="$(/home/core/wb.sh resource credentials --name "${ecr_repo_id}" --scope READ_ONLY --format json)" || {
130130
echo "Error: Failed to get credentials for repository ${ecr_repo_id}" >&2
131131
return 1
132132
}

0 commit comments

Comments
 (0)