Policy: AWSECRPullThroughCache_ServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSECRPullThroughCache_ServiceRolePolicy Allowed Actions Actions Services ecr:BatchCheckLayerAvailability ecr ecr:BatchGetImage ecr ecr:BatchImportUpstreamImage ecr ecr:CompleteLayerUpload ecr ecr:GetAuthorizationToken ecr ecr:GetDownloadUrlForLayer ecr ecr:GetImageCopyStatus ecr ecr:InitiateLayerUpload ecr ecr:PutImage ecr ecr:UploadLayerPart ecr secretsmanager:GetSecretValue secretsmanager