From 3d68cce87c4ec80f42847309c805e1dd4315018a Mon Sep 17 00:00:00 2001
From: Dries Verachtert <dries.verachtert@dries.eu>
Date: Wed, 12 Nov 2025 15:27:08 +0100
Subject: [PATCH] Allow the prod auth_manager ecs execution role to fetch
 images from the private ecr repo

---
 main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/main.tf b/main.tf
index 8828c70..bfca053 100644
--- a/main.tf
+++ b/main.tf
@@ -413,7 +413,7 @@ module "auth_manager" {
   source = "./private-ecr-repo"
 
   repository_name            = "auth-manager"
-  allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/auth_manager20251030104403745100000003"] # prod one still missing
+  allowed_to_pull_identities = ["arn:aws:iam::992382665735:role/auth_manager20251030104403745100000003", "arn:aws:iam::671250183987:role/auth_manager20251112133557154300000002"]
 }
 
 module "private_ecr_github_actions_upload_credentials_auth_manager" {