Policy: AmazonEC2ContainerRegistryReadOnly ARN: arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly Allowed Actions Actions Services ecr:BatchCheckLayerAvailability ecr ecr:BatchGetImage ecr ecr:DescribeImageScanFindings ecr ecr:DescribeImages ecr ecr:DescribeRepositories ecr ecr:GetAuthorizationToken ecr ecr:GetDownloadUrlForLayer ecr ecr:GetLifecyclePolicy ecr ecr:GetLifecyclePolicyPreview ecr ecr:GetRepositoryPolicy ecr ecr:ListImages ecr ecr:ListTagsForResource ecr