feat: Restrict ECR repository resource-based policy based on pipeline mode (DBTP-3170) - #1546

Merged

BenFielder merged 25 commits into

mainfrom

rewrite-ecr-permissions

Aug 21, 2026

Commits on Jul 7, 2026

feat: Update IAM policy document to limit ECR permissions (DBTP-3170)
BenFielder
committed
b0d3a05

Commits on Jul 9, 2026

Add role names for github actions and paketo
BenFielder
committed
551a9f4
Merge branch 'main' into rewrite-ecr-permissions
BenFielder
authored
2031ea4

Commits on Aug 18, 2026

allow image build role to delete
DeveloperConnor
committed
00b0f0b
merge main
DeveloperConnor
committed
ab3102f

Commits on Aug 19, 2026

Update policy to have conditional sections based on pipeline_mode
BenFielder
committed
7621040
Change name to match original file
BenFielder
committed
415a71c
Merge branch 'main' into rewrite-ecr-permissions
BenFielder
authored
e83b4f0
Updates based on PR feedback
BenFielder
committed
e188d4a
Run tf fmt
BenFielder
committed
f5d0aa9
Update terraform/codebase-pipelines/ecr.tf
dragos441
authored
6a7feaf
Separate out pull permissions
BenFielder
committed
35dc9da
Move policy statements into no condition area
BenFielder
committed
f480a3c
TF fmt
BenFielder
committed
cddda65
Update tests for new ECR policy
BenFielder
committed
67c3a0e
Change test condition star expected
BenFielder
committed
26166eb
Update tests to read correct part of values
BenFielder
committed
7421106
Fix issue with tests
BenFielder
committed
8c05632
tf fmt tests
BenFielder
committed
9090f33
fmt and fix test
BenFielder
committed
9a48388

Commits on Aug 20, 2026

try to recreate local var
BenFielder
committed
3db1cb3
fmt and add new test cases
BenFielder
committed
94fc9e3
Add spacing
BenFielder
committed
e1b23b3
Add override data to fix uneeded part on iam file
BenFielder
committed
74da15f

Commits on Aug 21, 2026

Merge branch 'main' into rewrite-ecr-permissions
BenFielder
authored
963f1f9