embeddingコンテナにAmazonECSTaskExecutionRolePolicyのポリシーを追加 (#501)

aws-samples · Aug 26, 2024 · cd66959 · cd66959
1 parent 1277acd
commit cd66959
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/cdk/lib/constructs/embedding.ts b/cdk/lib/constructs/embedding.ts
@@ -156,6 +156,11 @@ export class Embedding extends Construct {
     });
     taskLogGroup.grantWrite(this._container.taskDefinition.executionRole!);
     props.dbSecrets.grantRead(this._container.taskDefinition.taskRole);
+    this._container.taskDefinition.executionRole?.addManagedPolicy(
+      iam.ManagedPolicy.fromAwsManagedPolicyName(
+        "service-role/AmazonECSTaskExecutionRolePolicy"
+      )
+    );
     return this;
   }