Service: Amazon Elastic Container Registry Public
Short Name:
ecr-public
ARN Format:
arn:aws:ecr-public::${Account}:${RepositoryOrRegistry}/${RepositoryNameOrAccountId}
ARN Regex:
^arn:aws:ecr-public::.+
ReadOnlyAccess
…
AWSConfigRoleAction | Access | Reference | Description |
---|---|---|---|
ecr-public:DescribeImageTags | Docs | Grants permission to describe all the image tags for a given repository | |
ecr-public:DescribeRegistries | Docs | Grants permission to retrieve the catalog data associated with a registry | |
ecr-public:DescribeRepositories | Docs | Grants permission to describe image repositories in a registry | |
ecr-public:SetRepositoryPolicy | Docs | Grants permission to apply a repository policy on a specified repository to control access permissions | |
ecr-public:BatchCheckLayerAvailability | Docs | Grants permission to check the availability of multiple image layers in a specified registry and repository | |
ecr-public:DescribeImages | Docs | Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date | |
ecr-public:GetAuthorizationToken | Docs | Grants permission to retrieve a token that is valid for a specified registry for 12 hours | |
ecr-public:GetRegistryCatalogData | Docs | Grants permission to retrieve the catalog data associated with a registry | |
ecr-public:GetRepositoryCatalogData | Docs | Grants permission to retrieve the catalog data associated with a repository | |
ecr-public:GetRepositoryPolicy | Docs | Grants permission to retrieve the repository policy for a specified repository | |
ecr-public:ListTagsForResource | Docs | Grants permission to list the tags for an Amazon ECR resource | |
ecr-public:TagResource | Docs | Grants permission to tag an Amazon ECR resource | |
ecr-public:UntagResource | Docs | Grants permission to untag an Amazon ECR resource | |
ecr-public:BatchDeleteImage | Docs | Grants permission to delete a list of specified images within a specified repository | |
ecr-public:CompleteLayerUpload | Docs | Grants permission to inform Amazon ECR that the image layer upload for a specified registry, repository name, and upload ID, has completed | |
ecr-public:CreateRepository | Docs | Grants permission to create an image repository | |
ecr-public:DeleteRepository | Docs | Grants permission to delete an existing image repository | |
ecr-public:DeleteRepositoryPolicy | Docs | Grants permission to delete the repository policy from a specified repository | |
ecr-public:InitiateLayerUpload | Docs | Grants permission to notify Amazon ECR that you intend to upload an image layer | |
ecr-public:PutImage | Docs | Grants permission to create or update the image manifest associated with an image | |
ecr-public:PutRegistryCatalogData | Docs | Grants permission to create and update the catalog data associated with a registry | |
ecr-public:PutRepositoryCatalogData | Docs | Grants permission to update the catalog data associated with a repository | |
ecr-public:UploadLayerPart | Docs | Grants permission to upload an image layer part to Amazon ECR Public |
aws:RequestTag/${TagKey}
aws:ResourceTag/${TagKey}
aws:TagKeys
ecr-public:ResourceTag/${TagKey}