Private repository policy examples in Amazon ECR

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "AllowPushPull",
           "Effect": "Allow",
           "Principal": {
               "AWS": [
                   "arn:aws:iam::account-id:user/push-pull-user-1",
                   "arn:aws:iam::account-id:user/push-pull-user-2"
               ]
           },
           "Action": [
               "ecr:BatchGetImage",
               "ecr:BatchCheckLayerAvailability",
               "ecr:CompleteLayerUpload",
               "ecr:GetDownloadUrlForLayer",
               "ecr:InitiateLayerUpload",
               "ecr:PutImage",
               "ecr:UploadLayerPart"
           ]
       }
   ]
}

See also

• ecr:, ecr:GetAuthorizationToken, ecr:BatchGetImage, ecr:CompleteLayerUpload, ecr:ListImages
• ECR, aws ecr, Amazon ECR Public Gallery: public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning, AllowPushPull