# ask-community

Alexander Whillas

08/31/2022, 3:13 AM
Anyone know what permissions the Dagster Daemon Task in ECS needs?
🤖 1
I'm getting this error
Copy code
CannotPullContainerError: inspect image has been retried 1 time(s): failed to resolve ref "<|>": pulling from host <|> failed with status code [manifests latest]: 403 Forbidden
I copied the permissions for the daemon from the example docker compose file but it doesn't specify anything about ECR in there?
@jordan you did the original work on that docker-compose file, do you know what permission I need to add to the task role it get this to work?
seem the daemon doesn't have permissions to launch the user_code images?
OK, got it. Just had to override the daemons execution role with the managed policy
. If it get this mother working I'll publish the CDK stack template somewhere