https://dagster.io/ logo
#ask-community
Title
# ask-community
a

Alexander Whillas

08/31/2022, 3:13 AM
Anyone know what permissions the Dagster Daemon Task in ECS needs?
🤖 1
I'm getting this error
Copy code
CannotPullContainerError: inspect image has been retried 1 time(s): failed to resolve ref "<http://123456789.dkr.ecr.ap-southeast-1.amazonaws.com/my-dagster-pipelines:latest|123456789.dkr.ecr.ap-southeast-1.amazonaws.com/my-dagster-pipelines:latest>": pulling from host <http://123456789.dkr.ecr.ap-southeast-1.amazonaws.com|123456789.dkr.ecr.ap-southeast-1.amazonaws.com> failed with status code [manifests latest]: 403 Forbidden
I copied the permissions for the daemon from the example docker compose file but it doesn't specify anything about ECR in there?
@jordan you did the original work on that docker-compose file, do you know what permission I need to add to the task role it get this to work?
seem the daemon doesn't have permissions to launch the user_code images?
OK, got it. Just had to override the daemons execution role with the managed policy
AmazonECSTaskExecutionRolePolicy
. If it get this mother working I'll publish the CDK stack template somewhere