Add STS endpoint

NASA-IMPACT · Oct 4, 2024 · 2383626 · 2383626
1 parent 199c871
commit 2383626
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/standalone_base_infrastructure/network_construct.py b/standalone_base_infrastructure/network_construct.py
@@ -42,8 +42,9 @@ def __init__(
             "cloudwatch-logs": aws_ec2.InterfaceVpcEndpointAwsService.CLOUDWATCH_LOGS,
             "s3": aws_ec2.GatewayVpcEndpointAwsService.S3,
             "dynamodb": aws_ec2.GatewayVpcEndpointAwsService.DYNAMODB,
-            "ecr": aws_ec2.InterfaceVpcEndpointAwsService.ECR,
-            "ecr-docker": aws_ec2.InterfaceVpcEndpointAwsService.ECR_DOCKER,
+            "ecr": aws_ec2.InterfaceVpcEndpointAwsService.ECR,  # allows airflow to pull task images
+            "ecr-docker": aws_ec2.InterfaceVpcEndpointAwsService.ECR_DOCKER,  # allows airflow to pull task images
+            "sts": aws_ec2.InterfaceVpcEndpointAwsService.STS,  # allows airflow tasks to assume access roles
         }
 
         for id, service in vpc_endpoints.items():