ecr:BatchGetImage

ecr:BatchGetImage

 {
 "Version" : "2012-10-17",
 "Statement" : [
   {
     "Effect" : "Allow",
     "Action" : [
       "ecr:GetAuthorizationToken",
       "ecr:BatchCheckLayerAvailability",
       "ecr:GetDownloadUrlForLayer",
       "ecr:BatchGetImage",
       "logs:CreateLogStream",
       "logs:PutLogEvents"
     ],
     "Resource" : "*"
   }
 ]
}

Errors

 Error response from daemon: pull access denied for 0123456789.dkr.ecr.eu-west-1.amazonaws.com/your-repo, repository does not exist or may require 'docker login': denied: User: arn:aws:iam::12314234235:user/your-user is not authorized to perform: ecr:BatchGetImage on resource: arn:aws:ecr:eu-west-1:5435345354:repository/your-repo because no resource-based policy allows the ecr:BatchGetImage action

Related

• docker login, PAT, docker login --help, ~/.dockercfg, ~/.docker/config.json
• ECS execution policy
• AmazonECSTaskExecutionRolePolicy
• ecr:ListImages
• ecr:GetDownloadUrlForLayer
• ecr:DescribeImages
• ecr:BatchGetImage
• ecr:BatchCheckLayerAvailability

See also

• ecr:, ecr:GetAuthorizationToken, ecr:BatchGetImage, ecr:CompleteLayerUpload, ecr:ListImages, ecr:GetDownloadUrlForLayer, ecr:InitiateLayerUpload, managed policies for ECR
• ECR, aws ecr, Amazon ECR Public Gallery: public.ecr.aws, Terraform AWS ECR, Troubleshooting ECR, ecr:, ecr:ReplicateImage, ECR scanning, AllowPushPull
• Terraform resource: aws_iam_policy, AmazonECSTaskExecutionRolePolicy