update docs

aws · Jun 23, 2024 · cd1cc10 · cd1cc10
1 parent 54a1b58
commit cd1cc10
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/packages/@aws-cdk/aws-apprunner-alpha/lib/service.ts b/packages/@aws-cdk/aws-apprunner-alpha/lib/service.ts
@@ -1298,7 +1298,8 @@ export class Service extends cdk.Resource implements iam.IGrantable {
         undefined,
     });
 
-    // grant required privileges for the role
+    // grant required privileges for the role to access an image in Amazon ECR
+    // See https://docs.aws.amazon.com/apprunner/latest/dg/security_iam_service-with-iam.html#security_iam_service-with-iam-roles
     if (this.source.ecrRepository && this.accessRole) {
       this.source.ecrRepository.grantPull(this.accessRole);
       this.source.ecrRepository.grant(this.accessRole, 'ecr:DescribeImages');