Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon managed policies for Amazon ECR Public

Amazon ECR Public provides several managed policies that you can attach to users or Amazon EC2 instances. These policies allow for differing levels of control over Amazon ECR resources and API operations. You can apply these policies directly or use them as starting points for creating your own policies. For more information about each API operation that's mentioned in these policies, see Actions in the Amazon ECR Public API Reference.

AmazonElasticContainerRegistryPublicFullAccess

You can attach the AmazonElasticContainerRegistryPublicFullAccess policy to your IAM identities. This policy grants administrative access to Amazon ECR Public resources and allows an IAM identity (such as a user, group, or role) to use all Amazon ECR Public features.

To view the permissions for this policy, see AmazonElasticContainerRegistryPublicFullAccess in the Amazon Managed Policy Reference.

AmazonElasticContainerRegistryPublicPowerUser

You can attach the AmazonElasticContainerRegistryPublicPowerUser policy to your IAM identities. This policy grants power user access to Amazon ECR Public resources, providing write access to public repositories without allowing deletion of repositories or modification of policy documents.

To view the permissions for this policy, see AmazonElasticContainerRegistryPublicPowerUser in the Amazon Managed Policy Reference.

AmazonElasticContainerRegistryPublicReadOnly

You can attach the AmazonElasticContainerRegistryPublicReadOnly policy to your IAM identities. This policy grants read-only permissions to Amazon ECR Public resources, including the ability to describe public registries, list and describe public repositories, describe images, and pull images with the Docker CLI.

To view the permissions for this policy, see AmazonElasticContainerRegistryPublicReadOnly in the Amazon Managed Policy Reference.

Amazon ECR Public updates to Amazon managed policies

View details about updates to Amazon managed policies for Amazon ECR Public since the time that this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Amazon ECR Public Document history page.