diff --git a/ecr.tf b/ecr.tf
index 9e7940a..8b8b700 100644
--- a/ecr.tf
+++ b/ecr.tf
@@ -3,6 +3,11 @@
   image_tag_mutability = "MUTABLE"
 }
 
+resource "aws_ecr_repository" "trustedfirmware_misra" {
+  name                 = "misra"
+  image_tag_mutability = "MUTABLE"
+}
+
 
 resource "aws_iam_role" "ecr_pushpull_role" {
     name = "ecr_pushpull_role"
@@ -16,7 +21,9 @@
       "Principal": {
         "AWS": [
             "987685672616",
-            "arn:aws:iam::487149096843:user/vault"
+            "arn:aws:iam::487149096843:user/vault",
+            "arn:aws:iam::987685672616:user/arm-dev",
+            "arn:aws:iam::987685672616:user/paul.sokolovsky"
         ],
         "Service": "ec2.amazonaws.com"
       },
@@ -56,6 +63,7 @@
 EOF
 }
 
+
 module "trustedfirmware_fvp_storage" {
   source = "./modules/resources/s3"
   bucket = "trustedfirmware-fvp"
@@ -80,6 +88,31 @@
   ]
 }
 
+module "trustedfirmware_misra_storage" {
+  source = "./modules/resources/s3"
+  bucket = "trustedfirmware-misra"
+  acl = "private"
+}
+
+module "s3_misra_policy" {
+  source      = "./modules/resources/role_policy"
+  role_id     = aws_iam_role.ecr_pushpull_role.id
+  policy_file = "templates/role_policy.tmpl"
+  actions = [
+                "s3:AbortMultipartUpload",
+                "s3:ListBucket",
+                "s3:PutObject",
+                "s3:GetObject",
+                "s3:DeleteObject",
+                "s3:ListObjectsV2",
+                "s3:PutObjectAcl"
+  ]
+  resources = [
+                "arn:aws:s3:::trustedfirmware-misra/*",
+                "arn:aws:s3:::trustedfirmware-misra"
+  ]
+}
+
 module "packer_policy" {
   source      = "./modules/resources/role_policy"
   role_id     = aws_iam_role.ecr_pushpull_role.id
@@ -143,5 +176,3 @@
   name      = "jenkins_instance_profile"
   role_name =  aws_iam_role.ecr_pushpull_role.name
 }
-
-