Difference between revisions of "AllowPushPull"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
| − | Official | + | Official example: https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html |
| − | + | ||
| − | { | + | { |
"Version": "2012-10-17", | "Version": "2012-10-17", | ||
"Statement": [ | "Statement": [ | ||
| Line 16: | Line 16: | ||
}, | }, | ||
"Action": [ | "Action": [ | ||
| − | "ecr:BatchGetImage", | + | "[[ecr:BatchGetImage]]", |
| − | "ecr:BatchCheckLayerAvailability", | + | "[[ecr:BatchCheckLayerAvailability]]", |
| − | "ecr:CompleteLayerUpload", | + | "[[ecr:CompleteLayerUpload]]", |
| − | "ecr:GetDownloadUrlForLayer", | + | "[[ecr:GetDownloadUrlForLayer]]", |
| − | "ecr:InitiateLayerUpload", | + | "[[ecr:InitiateLayerUpload]]", |
| − | "ecr:PutImage", | + | "[[ecr:PutImage]]", |
| − | "ecr:UploadLayerPart" | + | "[[ecr:UploadLayerPart]]" |
] | ] | ||
} | } | ||
] | ] | ||
| − | } | + | } |
| − | |||
{{ECR}} | {{ECR}} | ||
Revision as of 10:09, 15 October 2024
Official example: https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPushPull",
"Effect": "Allow",
"Principal": {
"AWS": [
"arn:aws:iam::account-id:user/push-pull-user-1",
"arn:aws:iam::account-id:user/push-pull-user-2"
]
},
"Action": [
"ecr:BatchGetImage",
"ecr:BatchCheckLayerAvailability",
"ecr:CompleteLayerUpload",
"ecr:GetDownloadUrlForLayer",
"ecr:InitiateLayerUpload",
"ecr:PutImage",
"ecr:UploadLayerPart"
]
}
]
}
ECR, aws ecr, Amazon ECR Public Gallery: public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning, AllowPushPull
Advertising:
