ecr:

ecr:BatchGetImage
ecr:GetAuthorizationToken
ecr:BatchCheckLayerAvailability
ecr:GetDownloadUrlForLayer

ecr:DescribeRepositories

Error response from daemon: pull access denied for 0123456789.dkr.ecr.eu-west-1.amazonaws.com/your-repo, repository does not exist or may require 'docker login': denied: User: arn:aws:iam::12314234235:user/your-user is not authorized to perform: ecr:BatchGetImage on resource: arn:aws:ecr:eu-west-1:5435345354:repository/your-repo because no resource-based policy allows the ecr:BatchGetImage action

• AWS managed policy: AmazonECSTaskExecutionRolePolicy
• ECS execution policy

See also

• ECR, aws ecr, Amazon ECR Public Gallery: public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning, AllowPushPull