Skip to content

Service: ecr

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role AmazonEC2ContainerServiceforEC2Role
arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly AmazonEC2ContainerRegistryReadOnly
arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser AmazonEC2ContainerRegistryPowerUser
arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess AmazonEC2ContainerRegistryFullAccess
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/AWSCodeBuildAdminAccess AWSCodeBuildAdminAccess
arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy AmazonECSTaskExecutionRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerReadOnly AmazonSageMakerReadOnly
arn:aws:iam::aws:policy/AmazonSageMakerFullAccess AmazonSageMakerFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/AmazonEKSFargatePodExecutionRolePolicy AmazonEKSFargatePodExecutionRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForImageBuilder AWSServiceRoleForImageBuilder
arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy AccessAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/AWSCodePipeline_FullAccess AWSCodePipeline_FullAccess
arn:aws:iam::aws:policy/AmazonBraketFullAccess AmazonBraketFullAccess
arn:aws:iam::aws:policy/AWSRoboMaker_FullAccess AWSRoboMaker_FullAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/aws-service-role/ECRReplicationServiceRolePolicy ECRReplicationServiceRolePolicy
arn:aws:iam::aws:policy/EC2InstanceProfileForImageBuilderECRContainerBuilds EC2InstanceProfileForImageBuilderECRContainerBuilds
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV2 AWSCompromisedKeyQuarantineV2
arn:aws:iam::aws:policy/service-role/AWSAppRunnerServicePolicyForECRAccess AWSAppRunnerServicePolicyForECRAccess
arn:aws:iam::aws:policy/AmazonRedshiftAllCommandsFullAccess AmazonRedshiftAllCommandsFullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonInspector2ServiceRolePolicy AmazonInspector2ServiceRolePolicy
arn:aws:iam::aws:policy/AmazonBraketJobsExecutionPolicy AmazonBraketJobsExecutionPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSECRPullThroughCache_ServiceRolePolicy AWSECRPullThroughCache_ServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerServiceCatalogProductsCodeBuildServiceRolePolicy AmazonSageMakerServiceCatalogProductsCodeBuildServiceRolePolicy
arn:aws:iam::aws:policy/service-role/AmazonSageMakerServiceCatalogProductsLambdaServiceRolePolicy AmazonSageMakerServiceCatalogProductsLambdaServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServicesDeploymentToolkitPolicy AWSManagedServicesDeploymentToolkitPolicy
arn:aws:iam::aws:policy/AmazonEKSLocalOutpostClusterPolicy AmazonEKSLocalOutpostClusterPolicy
arn:aws:iam::aws:policy/AmazonSageMakerCanvasFullAccess AmazonSageMakerCanvasFullAccess
arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess AWSRefactoringToolkitFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/AmazonSageMakerModelRegistryFullAccess AmazonSageMakerModelRegistryFullAccess
arn:aws:iam::aws:policy/service-role/ROSAWorkerInstancePolicy ROSAWorkerInstancePolicy
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/service-role/EC2ImageBuilderLifecycleExecutionPolicy EC2ImageBuilderLifecycleExecutionPolicy
arn:aws:iam::aws:policy/AWSCleanRoomsMLFullAccess AWSCleanRoomsMLFullAccess
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerManageAccessRolePolicy AmazonDataZoneSageMakerManageAccessRolePolicy
arn:aws:iam::aws:policy/aws-service-role/ECRTemplateServiceRolePolicy ECRTemplateServiceRolePolicy
arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantineV3 AWSCompromisedKeyQuarantineV3
arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly AmazonEC2ContainerRegistryPullOnly
arn:aws:iam::aws:policy/ResourceGroupsTaggingAPITagUntagSupportedResources ResourceGroupsTaggingAPITagUntagSupportedResources
arn:aws:iam::aws:policy/SageMakerStudioProjectRoleMachineLearningPolicy SageMakerStudioProjectRoleMachineLearningPolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePermissionsBoundary SageMakerStudioProjectUserRolePermissionsBoundary
arn:aws:iam::aws:policy/service-role/SageMakerStudioProjectProvisioningRolePolicy SageMakerStudioProjectProvisioningRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePolicy SageMakerStudioProjectUserRolePolicy
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy

Allowed Actions

Action Service
ecr:* ecr
ecr:BatchCheck* ecr
ecr:BatchCheckLayerAvailability ecr
ecr:BatchDeleteImage ecr
ecr:BatchGet* ecr
ecr:BatchGetImage ecr
ecr:BatchGetRepositoryScanningConfiguration ecr
ecr:BatchImportUpstreamImage ecr
ecr:CompleteLayerUpload ecr
ecr:CreateRepository ecr
ecr:DeleteLifecyclePolicy ecr
ecr:DeleteRepository ecr
ecr:DeleteRepositoryPolicy ecr
ecr:Describe* ecr
ecr:DescribeImageReplicationStatus ecr
ecr:DescribeImageScanFindings ecr
ecr:DescribeImages ecr
ecr:DescribePullThroughCacheRules ecr
ecr:DescribeRegistry ecr
ecr:DescribeRepositories ecr
ecr:DescribeRepositoryCreationTemplates ecr
ecr:Get* ecr
ecr:GetAccountSetting ecr
ecr:GetAuthorizationToken ecr
ecr:GetDownloadUrlForLayer ecr
ecr:GetImageCopyStatus ecr
ecr:GetLifecyclePolicy ecr
ecr:GetLifecyclePolicyPreview ecr
ecr:GetRegistryPolicy ecr
ecr:GetRegistryScanningConfiguration ecr
ecr:GetRepositoryPolicy ecr
ecr:InitiateLayerUpload ecr
ecr:List* ecr
ecr:ListImages ecr
ecr:ListTagsForResource ecr
ecr:PutImage ecr
ecr:PutImageScanningConfiguration ecr
ecr:PutImageTagMutability ecr
ecr:PutLifecyclePolicy ecr
ecr:PutRegistryScanningConfiguration ecr
ecr:ReplicateImage ecr
ecr:SetRepositoryPolicy ecr
ecr:StartImageScan ecr
ecr:TagResource ecr
ecr:UntagResource ecr
ecr:UploadLayerPart ecr
ecr:batchCheckLayerAvailability ecr
ecr:batchGetRepositoryScanningConfiguration ecr
ecr:describeImageReplicationStatus ecr
ecr:describeImageScanFindings ecr
ecr:describeImages ecr
ecr:describePullThroughCacheRules ecr
ecr:describeRegistry ecr
ecr:describeRepositories ecr
ecr:getLifecyclePolicy ecr
ecr:getLifecyclePolicyPreview ecr
ecr:getRegistryPolicy ecr
ecr:getRegistryScanningConfiguration ecr
ecr:getRepositoryPolicy ecr
ecr:listImages ecr
ecr:listTagsForResource ecr