feat: prefix restriction enhancement

Signed-off-by: Kevin Lefevre <[email protected]>
clusterfrak-dynamics · Jan 13, 2020 · 37736e6 · 37736e6
1 parent 6bdb62a
commit 37736e6
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/ecr.tf b/ecr.tf
@@ -62,7 +62,7 @@ resource "aws_iam_policy" "ecr_user" {
       "ecr:PutImage"
     ],
     "Resource": [
-      "arn:aws:ecr:${var.aws["region"]}:${data.aws_caller_identity.current.account_id}:repository/${var.project}/*"
+      "arn:aws:ecr:${var.aws["region"]}:${data.aws_caller_identity.current.account_id}:repository/${var.prefix_restriction}${var.prefix_restriction != "" ? "/" : ""}*"
     ]
     },
     {

diff --git a/variables.tf b/variables.tf
@@ -22,3 +22,7 @@ variable "project" {
 variable "prefix" {
   default = ""
 }
+
+variable "prefix_restriction" {
+  default = ""
+}