ecr:*AWS Amazon Elastic Container Registry IAM Actions
60 IAM actions for ecr:*
Actions
60 actions available. Filter by access level or search by name.
Filter:
| Action | Access Level |
|---|---|
ecr:BatchCheckLayerAvailability | Write |
ecr:BatchDeleteImage | Write |
ecr:BatchGetImage | Read |
ecr:BatchGetRepositoryScanningConfiguration | Read |
ecr:BatchImportUpstreamImage | Write |
ecr:CompleteLayerUpload | Write |
ecr:CreatePullThroughCacheRule | Write |
ecr:CreateRepository | Write |
ecr:CreateRepositoryCreationTemplate | Write |
ecr:DeleteLifecyclePolicy | Permissions |
ecr:DeletePullThroughCacheRule | Write |
ecr:DeleteRegistryPolicy | Permissions |
ecr:DeleteRepository | Write |
ecr:DeleteRepositoryCreationTemplate | Write |
ecr:DeleteRepositoryPolicy | Permissions |
ecr:DeleteSigningConfiguration | Write |
ecr:DeregisterPullTimeUpdateExclusion | Write |
ecr:DescribeImageReplicationStatus | Read |
ecr:DescribeImages | Read |
ecr:DescribeImageScanFindings | Read |
ecr:DescribeImageSigningStatus | Read |
ecr:DescribePullThroughCacheRules | Read |
ecr:DescribeRegistry | Read |
ecr:DescribeRepositories | Read |
ecr:DescribeRepositoryCreationTemplates | Read |
ecr:GetAccountSetting | Read |
ecr:GetAuthorizationToken | Read |
ecr:GetDownloadUrlForLayer | Read |
ecr:GetImageCopyStatus | Read |
ecr:GetLifecyclePolicy | Permissions |
ecr:GetLifecyclePolicyPreview | Permissions |
ecr:GetRegistryPolicy | Permissions |
ecr:GetRegistryScanningConfiguration | Read |
ecr:GetRepositoryPolicy | Permissions |
ecr:GetSigningConfiguration | Read |
ecr:InitiateLayerUpload | Write |
ecr:ListImages | List |
ecr:ListPullTimeUpdateExclusions | List |
ecr:ListTagsForResource | Tagging |
ecr:PutAccountSetting | Write |
ecr:PutImage | Write |
ecr:PutImageScanningConfiguration | Write |
ecr:PutImageTagMutability | Tagging |
ecr:PutLifecyclePolicy | Permissions |
ecr:PutRegistryPolicy | Permissions |
ecr:PutRegistryScanningConfiguration | Write |
ecr:PutReplicationConfiguration | Write |
ecr:PutSigningConfiguration | Write |
ecr:RegisterPullTimeUpdateExclusion | Write |
ecr:ReplicateImage | Read |
ecr:SetRepositoryPolicy | Permissions |
ecr:StartImageScan | Write |
ecr:StartLifecyclePolicyPreview | Permissions |
ecr:TagResource | Tagging |
ecr:UntagResource | Tagging |
ecr:UpdateImageStorageClass | Write |
ecr:UpdatePullThroughCacheRule | Write |
ecr:UpdateRepositoryCreationTemplate | Write |
ecr:UploadLayerPart | Read |
ecr:ValidatePullThroughCacheRule | Read |
Resource Types
ARN patterns for resources in this service.
| Resource | ARN Pattern |
|---|---|
repository | arn:aws:ecr:${Region}:${Account}:repository/${RepositoryName} |
Condition Keys
Condition keys you can use in IAM policy conditions for this service.
aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysecr:AccountSettingecr:ResourceTag/${TagKey}Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
Total Actions60
Prefix
ecrResource Types1
Condition Keys5
Access Level Breakdown
Read19
Write24
List2
Permissions11
Tagging4