60 actions in the ecr service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to check the availability of multiple image layers in a specified registry and repository
Grants permission to delete a list of specified images within a specified repository
Grants permission to get detailed information for specified images within a specified repository
Grants permission to retrieve repository scanning configuration for a list of repositories
Grants permission to retrieve the image from the upstream registry and import it to your private registry
Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed
Grants permission to create new pull-through cache rule
Grants permission to create an image repository
Grants permission to create the repository creation template
Grants permission to delete the specified lifecycle policy
Grants permission to delete the pull-through cache rule
Grants permission to delete the registry policy
Grants permission to delete an existing image repository
Grants permission to delete the repository creation template
Grants permission to delete the repository policy from a specified repository
Grants permission to delete the signing configuration for the registry
Grants permission to deregister a pull time update exclusion
Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails
Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date
Grants permission to describe the image scan findings for the specified image
Grants permission to retrieve signing status about an image in a specified registry
Grants permission to describe the pull-through cache rules
Grants permission to describe the registry settings
Grants permission to describe image repositories in a registry
Grants permission to describe the repository creation template
Grants permission to retrieve account settings
Grants permission to retrieve a token that is valid for a specified registry for 12 hours
Grants permission to retrieve the download URL corresponding to an image layer
Grants permission to retrieve the status about an image copy
Grants permission to retrieve the specified lifecycle policy
Grants permission to retrieve the results of the specified lifecycle policy preview request
Grants permission to retrieve the registry policy
Grants permission to retrieve registry scanning configuration
Grants permission to retrieve the repository policy for a specified repository
Grants permission to retrieve the signing configuration for the registry
Grants permission to notify Amazon ECR that you intend to upload an image layer
Grants permission to list all the image IDs for a given repository
Grants permission to list pull time update exclusions for the registry
Grants permission to list the tags for an Amazon ECR resource
Grants permission to update account settings
Grants permission to create or update the image manifest associated with an image
Grants permission to update the image scanning configuration for a repository
Grants permission to update the image tag mutability settings for a repository
Grants permission to create or update a lifecycle policy
Grants permission to update the registry policy
Grants permission to update registry scanning configuration
Grants permission to update the replication configuration for the registry
Grants permission to update the signing configuration for the registry
Grants permission to register a pull time update exclusion
Grants permission to replicate images to the destination registry
Grants permission to apply a repository policy on a specified repository to control access permissions
Grants permission to start an image scan
Grants permission to start a preview of the specified lifecycle policy
Grants permission to tag an Amazon ECR resource
Grants permission to untag an Amazon ECR resource
Grants permission to get update the storage class of a specified image within a specified repository
Grants permission to update the pull-through cache rule
Grants permission to update the repository creation template
Grants permission to upload an image layer part to Amazon ECR
Grants permission to validate the pull-through cache rule