diff --git a/terraform/api.tf b/terraform/api.tf
index 7bf14f0def0743700dec8a39f1cfd1ae59eec1b7..7c03d22563624ca338b6cb2a49694a715219a339 100644
--- a/terraform/api.tf
+++ b/terraform/api.tf
@@ -2,6 +2,15 @@ resource "yandex_iam_service_account" "api-sa" {
   name        = "api-sa"
 }
 
+resource "yandex_container_registry_iam_binding" "api-sa-puller" {
+  registry_id = var.api_registry
+  role        = "container-registry.images.puller"
+
+  members = [
+    "serviceAccount:${yandex_iam_service_account.api-sa.id}",
+  ]
+}
+
 resource "yandex_serverless_container" "test-container" {
   name               = "api"
   memory             = 128