ecr:BatchGetImage
ecr:BatchGetImage
{ "Version" : "2012-10-17", "Statement" : [ { "Effect" : "Allow", "Action" : [ "ecr:GetAuthorizationToken", "ecr:BatchCheckLayerAvailability", "ecr:GetDownloadUrlForLayer", "ecr:BatchGetImage", "logs:CreateLogStream", "logs:PutLogEvents" ], "Resource" : "*" } ] }
Errors
Error response from daemon: pull access denied for 0123456789.dkr.ecr.eu-west-1.amazonaws.com/your-repo, repository does not exist or may require 'docker login': denied: User: arn:aws:iam::12314234235:user/your-user is not authorized to perform: ecr:BatchGetImage on resource: arn:aws:ecr:eu-west-1:5435345354:repository/your-repo because no resource-based policy allows the ecr:BatchGetImage action
Related
docker login, PAT, docker login --help, ~/.dockercfg, ~/.docker/config.json
- ECS execution policy
- AmazonECSTaskExecutionRolePolicy
See also
ecr:, ecr:GetAuthorizationToken, ecr:BatchGetImage, ecr:CompleteLayerUpload, ecr:ListImages
- ECR,
aws ecr, Amazon ECR Public Gallery: public.ecr.aws
, Terraform AWS ECR, Troubleshooting ECR,ecr:
,ecr:ReplicateImage
, ECR scanning,AllowPushPull
- Terraform resource:
aws_iam_policy
,AmazonECSTaskExecutionRolePolicy
Advertising: