如何解决限制EC2实例具有对ECR存储库的只读访问权限
我已经创建了ecr存储库来存储docker映像。我想看看我是否只能提供对ec2实例的只读访问权限。我的ec2实例被赋予了以下角色:AmazonEC2ContainerRegistryReadOnly,可以看作-
{
"Version": "2012-10-17","Statement": [
{
"Effect": "Allow","Action": [
"ecr:GetAuthorizationToken","ecr:BatchCheckLayerAvailability","ecr:GetDownloadUrlForLayer","ecr:GetRepositoryPolicy","ecr:DescribeRepositories","ecr:ListImages","ecr:DescribeImages","ecr:BatchGetImage","ecr:GetLifecyclePolicy","ecr:GetLifecyclePolicyPreview","ecr:ListTagsForResource","ecr:DescribeImageScanFindings"
],"Resource": "*"
}
]
}
我的ecr政策内容如下:
{
"Version": "2008-10-17","Statement": [
{
"Sid": "ecr repo policy","Effect": "Allow","Principal": {
"AWS": "arn:aws:iam::531523267983:root"
},"Action": [
"ecr:BatchCheckLayerAvailability","ecr:GetAuthorizationToken","ecr:GetDownloadUrlForLayer"
]
}
]
}
但是,当我尝试将docker映像从我的ec2实例推送到此存储库时,即使我已提供对ec2实例的只读访问权限,我也能够成功推送该镜像。我要去哪里错了
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。