Policy: AmazonElasticContainerRegistryPublicReadOnly ARN: arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicReadOnly Allowed Actions Actions Services ecr-public:BatchCheckLayerAvailability ecr-public ecr-public:DescribeImageTags ecr-public ecr-public:DescribeImages ecr-public ecr-public:DescribeRegistries ecr-public ecr-public:DescribeRepositories ecr-public ecr-public:GetAuthorizationToken ecr-public ecr-public:GetRegistryCatalogData ecr-public ecr-public:GetRepositoryCatalogData ecr-public ecr-public:GetRepositoryPolicy ecr-public sts:GetServiceBearerToken sts